CVE-2023-21529 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	8.8 HIGH	NETWORK	LOW	LOW	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-502 - Deserialization of Untrusted Data
The application deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

Vulnerability Media Exposure

[ENGLISH] Zombie Microsoft bugs rise from the dead, pave way for crims and ransomware scum
One was patched almost 14 years ago Crooks are exploiting four Microsoft vulnerabilities - one patched 14 years ago and another tied to ransomware activity - according to America's lead cyber-defense agency, which on Monday gave federal agencies two weeks to patch them.…
Published: 2026-04-13T21:35:36+00:00
[GERMAN] Angriffe auf sieben Sicherheitslücken beobachtet – eine ist 14 Jahre alt
Die US-Cybersicherheitsbehörde CISA warnt vor Angriffen auf sieben Sicherheitslücken. Eine davon hat 14 Jahre auf dem Buckel.
Published: 2026-04-14T07:19:00+00:00
[ENGLISH] CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The list of vulnerabilities is as follows - CVE-2026-21643 (CVSS score: 9.1) - An SQL injection vulnerability in Fortinet FortiClient EMS that could allow an
Published: 2026-04-14T11:09:00+05:30

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-21529

https://www.microsoft.com/en-us/security/blog/2026/04/06/storm-1175-focuses-gaze-on-vulnerable-web-facing-assets-in-high-tempo-medusa-ransomware-operations/