3081 matches found
Microsoft Exchange Server Security Feature Bypass Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 11, 2026 (KB5121573)
None None...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Denial of Service Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...
PT-2026-70597
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper control of resource identifiers, known as resource injection, allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, the...
PT-2026-70599
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Deserialization of untrusted data allows an authorized attacker to cause a denial of service over a network. Deserialization is the process of converting a data stream back...
PT-2026-70601
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Improper neutralization of input during web page generation leads to a cross-site scripting issue, which allows an authorized attacker to perform spoofing over a network...
KLA91210 Multiple vulnerabilities in Microsoft Server Software
Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface. Below is a complete lis...
PT-2026-70697
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A server-side request forgery SSRF issue allows an authorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make...
PT-2026-70602
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Missing authorization allows an authorized attacker to bypass a security feature over a network. Recommendations At the moment, there is no information about a newer version...
PT-2026-70598
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2016 Microsoft Exchange Server 2019 Microsoft Exchange Server Subscription Edition Description An authentication bypass by capture-replay allows an authorized attacker to elevate privileges over a network. The issue...
PT-2026-70600
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description A heap-based buffer overflow allows an authorized attacker to execute arbitrary code over a network, which can affect the system. A heap-based buffer overflow occurs when a...
Security Updates for Microsoft Exchange Server (August 2026)
The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a...
EUVD-2026-44026
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-44024
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-55005
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...