module

Microsoft Exchange Server ChainedSerializationBinder RCE

Disclosed
Dec 9, 2021

Description

This module exploits vulnerabilities within the ChainedSerializationBinder as used in
Exchange Server 2019 CU10, Exchange Server 2019 CU11, Exchange Server 2016 CU21, and
Exchange Server 2016 CU22 all prior to Mar22SU.

Note that authentication is required to exploit these vulnerabilities.
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.