16397 matches found
CVE-2026-62913
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-62915
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
CVE-2026-62914
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
CVE-2026-62910
Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-62911
Technical details (affected software, vulnerable component, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.
CVE-2026-62911 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
EUVD-2026-56688
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
EUVD-2026-56447
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813 Microsoft Exchange Server Elevation of Privilege Vulnerability
...
CVE-2026-65813
SSRF in Microsoft Exchange Server lets an authenticated attacker escalate privileges over the network. NVD scores it HIGH (CVSS 8.8), while Microsoft's CNA rates it MEDIUM (6.5) with confidentiality impact only. Microsoft has released fixes: KB5121573 (Exchange Server Subscription Edition RTM), K...
CVE-2026-62914 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-62915
Technical details about this CVE are not publicly provided in the supplied documents. Monitor for updates from vendors and security feeds for affected product, component, and remediation.
CVE-2026-62914
CVE-2026-62914 is a Microsoft Exchange Server vulnerability involving improper neutralization of input during web page generation (XSS) that allows an authorized attacker to spoof over the network. Affected product: Microsoft Exchange Server. Core issue: cross-site scripting due to input handling...
EUVD-2026-56417
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...
CVE-2026-62915 Microsoft Exchange Server Security Feature Bypass Vulnerability
...