3010 matches found
CVE-2026-55008
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-55006
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-55008
CVE-2026-55008 affects Microsoft Exchange Server and is caused by improper neutralization of input during web page generation, enabling cross-site scripting. The NVD entry lists a high-severity CVSS 3.1 base score of 9.6 (NETWORK, LOW attack complexity, NONE privileges, user interaction required,...
CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-55005
CVE-2026-55005 is a reported heap-based buffer overflow in Microsoft Exchange Server that enables an authorized attacker to execute code over the network. According to the sources, the vulnerability can be triggered remotely (attack vector: NETWORK) with low privileges required and no user intera...
CVE-2026-55005
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Description of the security update for Microsoft Exchange Server 2019 CU15: July 14, 2026 (KB5103213)
None None...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: July 14, 2026 (KB5103212)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: July 14, 2026 (KB5103214)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: July 14, 2026 (KB5103215)
None None...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
PT-2026-58249
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Security Updates for Microsoft Exchange Server (July 2026)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the July, 2026 security bulletin. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...
PT-2026-58251
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...