CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Microsoft Exchange Server Elevation of Privilege and NTLM Relay Vulnerability (CVE-2024-21410) Urgent Security Advisory
[Affected Scope] Microsoft Exchange Server 2016 and 2019 environments where Cumulative Updates and Extended Protection are not enabled.
[Impact] Unauthenticated remote attackers can perform NTLM credential relay attacks to elevate privileges, gaining administrative access to Exchange servers and compromising mailboxes.
[Mitigation] Upgrade Exchange Server to the latest Cumulative Update (CU) and enforce the Extended Protection feature immediately.
Microsoft Outlook Remote NTLM Credential Theft & Elevation of Privilege Vulnerability (CVE-2023-23397) Critical Security Advisory
[Affected Scope] All supported desktop versions of Microsoft Outlook for Windows, including Outlook 2013, 2016, LTSC 2021, and Microsoft 365 Apps
[Impact] Attackers can trigger the vulnerability silently without user interaction (Zero-Click) simply by sending a malicious email, leaking the user's NTLM hash to external servers for NTLM relay attacks
[Mitigation] Apply the official Microsoft security updates immediately, block outbound SMB traffic (TCP port 445) at the perimeter, and run the Exchange audit script to purge malicious items
Windows LSA Spoofing and NTLM Relay Vulnerability (CVE-2022-26925) Security Advisory
[Affected Scope] Windows and Windows Server operating systems, specifically Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can call methods on the LSARPC interface to coerce the Domain Controller to authenticate to an arbitrary target via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft cumulative security updates immediately, and enforce Extended Protection for Authentication (EPA) along with SMB signing to block NTLM relay paths
Windows LSA Spoofing Vulnerability (CVE-2021-36942, PetitPotam) Technical Analysis and Mitigation Guide
[Affected Scope] Windows and Windows Server operating systems, particularly Active Directory Domain Controllers
[Impact] Unauthenticated remote attackers can exploit the LSARPC interface to force a Domain Controller to authenticate against an arbitrary server via NTLM, leading to full domain takeover
[Mitigation] Apply the official Microsoft security updates immediately, and configure Extended Protection for Authentication (EPA) alongside SMB signing to block NTLM relay vectors
Microsoft Exchange Server Elevation of Privilege and NTLM Relay Vulnerability (CVE-2018-8581) Analysis & Mitigation Guide
[Affected Scope] Microsoft Exchange Server 2010, 2013, 2016, and 2019
[Impact] An attacker can elevate privileges to SYSTEM/Exchange Windows Permissions, leading to a complete compromise of the Active Directory domain controller
[Mitigation] Remove the 'DisableLoopbackCheck' registry key, apply the latest Exchange Cumulative Updates, and enable Extended Protection for Authentication (EPA) on EWS