CISA Alerts on Exploited Microsoft Exchange and Windows CLFS Security Flaws

CISA issued a high-priority advisory for two actively exploited Microsoft vulnerabilities—CVE-2023-36424 (Windows CLFS local privilege escalation) and CVE-2023-21529 (Exchange Server deserialization leading to remote code execution)—added to the Known Exploited Vulnerabilities catalog and subject to a federal mitigation deadline; organizations are strongly urged to apply Microsoft patches immediately to prevent severe network compromise.