INCIDENT EVIDENCE GRAPH

CVE-2023-21529: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

2026-04-13T00:00:00Z

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.；Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.；Due: 2026-04-27

• Victim: Microsoft Exchange Server
• Exploit: CVE-2023-21529
• Method: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Primary evidence

1. CVE-2023-21529: Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

中文