CVE-2026-55008

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-55009

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally...

CVE-2026-50696

Heap-based buffer overflow in Windows Internet Key Exchange IKE Protocol allows an unauthorized attacker to deny service over a network...

CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-55009 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-55009

CVE-2026-55009 describes a deserialization of untrusted data in Microsoft Exchange Server that enables a locally authenticated attacker to elevate privileges. The CVSSv3.1 details show a Local attack vector, Low attack complexity, Low privileges required, and No user interaction, with High impact...

CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-55008

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-55008

CVE-2026-55008 affects Microsoft Exchange Server and is caused by improper neutralization of input during web page generation, enabling cross-site scripting. The NVD entry lists a high-severity CVSS 3.1 base score of 9.6 (NETWORK, LOW attack complexity, NONE privileges, user interaction required,...

CVE-2026-55008 Microsoft Exchange Server Spoofing Vulnerability

...

CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-55006 Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2026-55006

Microsoft Exchange Server vulnerability CVE-2026-55006: Insufficient granularity of access control enables local privilege escalation for an authorized attacker. Root cause: lack of fine-grained access controls. Impact: high confidentiality, integrity, and availability impact per CVSS 3.1 (AV:L/A...

CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-55005

CVE-2026-55005 is a reported heap-based buffer overflow in Microsoft Exchange Server that enables an authorized attacker to execute code over the network. According to the sources, the vulnerability can be triggered remotely (attack vector: NETWORK) with low privileges required and no user intera...

CVE-2026-55005 Microsoft Exchange Server Remote Code Execution Vulnerability

...

CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

...

CVE-2026-50696

CVE-2026-50696 is a heap-based buffer overflow in the Windows Internet Key Exchange (IKE) Protocol that allows an unauthenticated, network-based attacker to cause a denial of service. The vulnerability is documented across several sources (NVD and CVE records), with a CVSS v3.1 base score of 7.5 ...

CVE-2026-50696 Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability

...

openssl: OpenSSL TLS 1.3 server may choose unexpected key agreement group

A key group selection preference flaw has been discovered in OpenSSL. An OpenSSL TLS 1.3 server may fail to negotiate the expected preferred key exchange group when its key exchange group configuration includes the default by using the "DEFAULT" keyword. A less preferred key exchange may be used...