7.8
Élevée
CVE-2026-87695 Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to…
Description
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Exchange Server 2016 Cumulative Update 23 15.01 | 15.01.0.0 → < 15.01.2507.077 | 15.01.2507.077 |
| Microsoft Exchange Server 2019 Cumulative Update 14 15.02 | 15.02.0.0 → < 15.02.1544.050 | 15.02.1544.050 |
| Microsoft Exchange Server 2019 Cumulative Update 15 15.02 | 15.02.0.0 → < 15.02.1748.055 | 15.02.1748.055 |
| Microsoft Exchange Server Subscription Edition RTM 15.02 | 15.02.0.0 → < 15.02.2562.056 | 15.02.2562.056 |
Références
- Microsoft Exchange Server Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Exchange Server 2016 Cumulative Update 23
Les 88 CVE de Microsoft Exchange Server 2016 Cumulative Update 23 →
CVE-2026-70279
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows…
9.3
Critique
CVE-2026-87696
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate…
7.5
Élevée
CVE-2026-87692
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges…
7.8
Élevée
CVE-2026-70571
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network
8.1
Élevée