16560 matches found
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62914
CVE-2026-62914 is a Microsoft Exchange Server vulnerability involving improper neutralization of input during web page generation (XSS) that allows an authorized attacker to spoof over the network. Affected product: Microsoft Exchange Server. Core issue: cross-site scripting due to input handling...
CVE-2026-62915
Technical details about this CVE are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds for affected product, component, and remediation.
EUVD-2026-56417
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
EUVD-2026-56416
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62912
Microsoft Exchange Server is affected by CVE-2026-62912, describing a deserialization of untrusted data vulnerability that allows an authorized attacker to trigger a denial of service over the network. The CVSS 3.1 base score is 6.5 (Medium) with network attack vector, low attack complexity, priv...
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
...
EUVD-2026-56414
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...
CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability
...
CVE-2026-62913 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-62913
CVE-2026-62913 describes a heap-based buffer overflow in Microsoft Exchange Server that allows an authorized attacker to execute code over a network. The CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and privileges required: LOW; impact on confidentiality, ...
EUVD-2026-56415
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-62912 Microsoft Exchange Server Denial of Service Vulnerability
...
CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-62910
CVE-2026-62910 affects Microsoft Exchange Server and stems from improper control of resource identifiers (resource injection). According to the available documents, the issue allows an authorized attacker to elevate privileges over a network, with CVSS v3.1 base metrics: Network attack vector, Lo...