Microsoft Exchange Server Tampering Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network...

Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...

Microsoft Exchange Server Information Disclosure Vulnerability

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network...

PT-2025-32741

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The software contains an issue with improper handling of additional special elements, potentially allowing an unauthorized attacker to perform spoofing over a network...

PT-2025-32788

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description A critical issue exists in the Microsoft Windows Graphics Component, specifically within the windowscodecs.dll library. This flaw is an untrusted pointer dereference that...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a set of e-mail service programs from the American Microsoft Corporation Microsoft. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The vulnerability is exploited b...

KLA86581 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft...

PT-2025-32758

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: An issue allows attackers to obtain sensitive information and affect the system. This exposure of sensitive information to an unauthorized actor allows an attacker to...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is a set of e-mail service programs from Microsoft USA. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. An input validation error vulnerability exists in Microsoft Exchange Server that stems from incorrect inpu...

PT-2025-32742

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper validation of syntactic correctness of input allows an unauthorized attacker to perform spoofing over a network. Recommendations: At the moment, there is no...

PT-2025-32740

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network. Recommendations: At the moment, there is no...

Microsoft Exchange Server 信息泄露漏洞

Microsoft Exchange Server is a set of e-mail service programs from Microsoft. It provides email access, storage, forwarding, voice mail, email filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability to obta...

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is a set of e-mail service programs from the American Microsoft Corporation Microsoft. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. The vulnerability is exploited b...

Security Updates for Microsoft Exchange Server (August 2025)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the August, 2025 security bulletin. - Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an...

CVE-2025-53786

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...

The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

Microsoft Discloses Exchange Server Flaw Enabling Silent Cloud Access in Hybrid Setups

Microsoft has released an advisory for a high-severity security flaw affecting on-premise versions of Exchange Server that could allow an attacker to gain elevated privileges under certain conditions. The vulnerability, tracked as CVE-2025-53786 , carries a CVSS score of 8.0. Dirk-jan Mollema wit...

Vulnerability fixed in Microsoft Exchange

Microsoft has fixed a vulnerability in Microsoft Exchange Server hybrid deployments. The vulnerability allows a user with administrative privileges on an on-premises Microsoft Exchange server to elevate privileges to the cloud. Microsoft has released a Hot Fix to fix the vulnerability. See attach...

Security Updates for Microsoft Exchange Server (April 2025)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by a vulnerability as referenced in the April 2025 security bulletin. - Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability CVE-2025-53786 Note that...

CVE-2025-53786

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identifi...