CVE-2022-21978

Summary

CVE-2022-21978 is an elevation of privilege vulnerability affecting Microsoft Exchange Servers. A successful exploit could allow an attacker to gain administrative control over an affected system. This vulnerability is due to insufficient input validation, allowing attackers to send malicious emails containing specially crafted attachments to targets. Upon opening the attachment, an attacker could execute arbitrary code on the Exchange Server, potentially leading to a complete system takeover. Microsoft strongly recommends applying the available patch to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.