Jan 10, 2023
2 new incidents, 0 with updates.
Started
- ClosedPatched
Microsoft Exchange Server: Privilege Escalation (CVE-2022-41080)
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. Added to CISA KEV on 2023-01-10. CISA lists known use in ransomware campaigns.
Microsoft Exchange ServerClosed Jan 10, 2023
- ClosedPatched
Microsoft Windows: Advanced Local Procedure Call (ALPC) Privilege Escalation (CVE-2023-21674)
Microsoft Windows Advanced Local Procedure Call (ALPC) contains an unspecified vulnerability that allows for privilege escalation. Added to CISA KEV on 2023-01-10.
Microsoft WindowsClosed Jan 10, 2023
