Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation

Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates.
Tracked as CVE-2024-21410 (CVSS score: 9.8), the issue has been described as a case of privilege escalation impacting the Exchange Server.
"An attacker

actively exploited case critical cve cve-2024-21410 cvss cvss score exchange exchange server exploitation exploited fixes flaw issue microsoft patch patch tuesday patch tuesday updates score security security flaw server tuesday under updates vulnerability