16628 matches found
CVE-2026-45502
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...
CVE-2026-45503
Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network...
CVE-2026-45500
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-45501
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
AZL-95910 CVE-2026-42770 affecting package edk2 20240524git3e722403cd16-18
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...
CVE-2026-24180
creationtimestamp| type| source ---|---|--- 2026-06-09 17:10:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnuotjfmxk2p 2026-06-09 18:14:05+00:00| seen| https://infosec.exchange/users/AAKL/statuses/116721479487661795...
CVE-2026-47631
The CVE-2026-47631 entry concerns Microsoft Exchange Server with a vulnerability in the rendering of web pages, described as improper neutralization of input during web page generation (cross-site scripting). The underlying issue allows an unauthorized attacker to spoof users over the network. Th...
CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-47631 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-45583 Microsoft Exchange Server Remote Code Execution Vulnerability
...
CVE-2026-45583
CVE-2026-45583 involves Microsoft Exchange Server and is described as an improper control of generation of code (code injection) that enables an unauthenticated attacker to execute code over the network. The CVSS 3.1 base score is 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidential...
CVE-2026-45504 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-45504
CVE-2026-45504 is an SSRF-based elevation of privilege in Microsoft Exchange Server . The entry notes an attacker who is authorized can elevate privileges over the network. CVSS v3.1 base score is 8.8 (HIGH) with NETWORK attack vector, LOW attack complexity, and LOW privileges required, with NONE...
CVE-2026-45504 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2026-45503 Microsoft Exchange Server Information Disclosure Vulnerability
...
CVE-2026-45503
CVE-2026-45503 is an SSRF vulnerability in Microsoft Exchange Server that could allow an authorized attacker to disclose information over a network. The provided documents cite CVSSv3.1 base metrics: 8.1 (High), with NETWORK attack vector, LOW attack complexity, Privileges Required: LOW, no user ...