Microsoft Exchange Online vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Exchange Online: 6 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:exchange_online
CVE-2026-65801
Critical · 10.0
CWE-918 Aug 20, 2026
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56191
Critical · 10.0
CWE-287 Jul 23, 2026
Microsoft Exchange Online Tampering Vulnerability
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVE-2026-54998
High · 8.8
CWE-863 Jul 2, 2026
Microsoft Exchange Online Elevation of Privilege Vulnerability
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48582
Critical · 9.6
CWE-862 Jun 19, 2026
Microsoft Exchange Online - Missing Authorization Leading to Privilege Escalation
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48579
High · 7.5
CWE-285 Jun 4, 2026
Microsoft Exchange Online Information Disclosure Vulnerability
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
CVE-2026-26137
Critical · 9.9
CWE-918 Mar 19, 2026
Microsoft Exchange Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.