CISA Adds CVE-2022-41080 and CVE-2023-21674 to the Known Exploited Vulnerabilities Catalog

FortiGuard Labs is aware that the Cybersecurity & Infrastructure Security Agency (CISA) added CVE-2022-41080 (Microsoft Exchange Server Elevation of Privilege Vulnerability) and CVE-2023-21674 (Microsoft Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability) to their Known Exploited Vulnerabilities catalog on January 10, 2023. The catalog list vulnerabilities that are being actively exploited in the wild and require federal agencies to apply patches by the due date.Why is this Significant?This is significant because CVE-2022-41080 (Microsoft Exchange Server Elevation of Privilege …

actively exploited advanced agency alpc amp aware call catalog cisa cve cve-2022-41080 cve-2023-21674 cybersecurity exchange exchange server exploited federal federal agencies infrastructure infrastructure security january known exploited vulnerabilities known exploited vulnerabilities catalog labs list local microsoft microsoft exchange microsoft exchange server microsoft windows patches privilege procedure security server vulnerabilities vulnerability windows