Microsoft Exchange Server Elevation of Privilege Vulnerability

A vulnerability allowing privilege escalation has been identified in Microsoft Exchange Server. This issue arises from improper input validation, which enables an authorized attacker to elevate privileges over a network. The vulnerability affects multiple versions of Microsoft Exchange Server, including Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition.

Impact

Exploitation of this vulnerability could allow an authorized attacker to gain administrator privileges on the affected system.

Remediation

Users can download the security update for Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, or Microsoft Exchange Server 2019 Cumulative Update 15. Instructions for downloading these security updates are available on the Microsoft Exchange Server Security Updates page.