57 matches found
CVE-2026-62911
CVE-2026-62911 Microsoft Exchange Server 上的预认证 RCE。无需任何凭据。 Orange Tsai（DEVCORE）在 Pwn2Own Berlin 2026 上将其作为 3 漏洞利用链的一部分使用。奖金 20 万美元，可完全接管 SYSTEM。 功能简介 Exchange 在两条路径上暴露了 MailboxReplicationProxyService（MRSProxy）。其中一条位于未启用扩展保护（Extended Protection）的 HTTP.sys 上： 路径| 托管方| 扩展保护 ---|---|---...
Description of the security update for Microsoft Exchange Server 2019 CU15: February 10, 2026 (KB5074993)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: December 9, 2025 (KB5071873)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: December 9, 2025 (KB5071876)
None None...
Description of the security update for Microsoft Exchange Server 2019 CU14: December 9, 2025 (KB5071874)
None None...
EUVD-2017-17445
Malware in sbrugna...
EUVD-2025-27294
Malicious code in bioql PyPI...
CVE-2025-55234
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...
CVE-2025-55234
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...
CVE-2025-55234
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...
Windows SMB Elevation of Privilege Vulnerability
SMB Server might be susceptible to relay attacks depending on the configuration. An attacker who successfully exploited these vulnerabilities could perform relay attacks and make the users subject to elevation of privilege attacks. The SMB Server already supports mechanisms for hardening against...
PT-2025-36891
Name of the Vulnerable Software and Affected Versions Windows Server Message Block SMB versions prior to September 2025 Patch Tuesday Description The SMB Server may be susceptible to relay attacks depending on the configuration. Successful exploitation of this issue could allow an attacker to...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: August 12, 2025 (KB5063224)
None None...
Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063222)
None None...
Description of the security update for Microsoft Exchange Server 2016: August 12, 2025 (KB5063223)
None None...
Description of the security update for Microsoft Exchange Server 2019: August 12, 2025 (KB5063221)
None None...
Mitigating NTLM Relay Attacks by Default
Introduction In February 2024, we released an update to Exchange Server which contained a security improvement referenced by CVE-2024-21410 that enabled Extended Protection for Authentication EPA by default for new and existing installs of Exchange 2019. While we’re currently unaware of any activ...
Description of version 2 of the security update for Microsoft Exchange Server 2019 and 2016: November 27, 2024 (KB5049233)
None None...
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
None None...
OWA not accessible on Secure Web iOS when Extended Protection is Enabled
After enabling Extended Protection on Exchange Server 2019 CU14, accessing OWA via Secure Web iOS is no longer possible. Users accessing Outlook Web Access OWA through Secure Web on iOS are continuously getting http 401 login prompt. The issue is not seen when using other browsers like Chrome or...