Vulnerabilidades do Microsoft Exchange Server Subscription Edition

CVE-2026-96940 Alta · 8.8 CWE-1390 02/10/2026

Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate...

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-69641 Crítica · 9.1 CWE-862 08/09/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-69382 Média · 5.9 CWE-327 08/09/2026

Microsoft Exchange Server Information Disclosure Vulnerability

Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

CVE-2026-69380 Alta · 8.1 CWE-862 08/09/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-69378 Alta · 7.5 CWE-674 08/09/2026

Microsoft Exchange Server Denial of Service Vulnerability

Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

CVE-2026-69375 Média · 6.5 CWE-639 08/09/2026

Microsoft Exchange Server Tampering Vulnerability

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

CVE-2026-69361 Média · 6.5 CWE-918 08/09/2026

Microsoft Exchange Server Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

CVE-2026-69356 Crítica · 9.3 CWE-79 08/09/2026

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-69355 Alta · 8.8 CWE-73 08/09/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVE-2026-55007 Alta · 8.1 CWE-415 08/09/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVE-2026-65813 Alta · 8.8 CWE-918 11/08/2026

Server-Side Request Forgery (SSRF) em Microsoft Exchange Server

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-62915 Média · 6.5 CWE-862 11/08/2026

Missing Authorization em Microsoft Exchange Server

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.

CVE-2026-62914 Média · 5.4 CWE-79 11/08/2026

Cross-site Scripting (XSS) em Microsoft Exchange Server

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

CVE-2026-62913 Alta · 8.8 CWE-122 11/08/2026

Heap-based Buffer Overflow em Microsoft Exchange Server

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVE-2026-62912 Média · 6.5 CWE-502 11/08/2026

Deserialization of Untrusted Data em Microsoft Exchange Server

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

CVE-2026-62911 Alta · 8.0 CWE-294 11/08/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-62910 Alta · 8.8 CWE-99 11/08/2026

Improper control of resource identifiers ('resource injection') in Microsoft Exchange…

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-55009 Alta · 7.8 CWE-502 14/07/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-55008 Crítica · 9.6 CWE-79 14/07/2026

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-55006 Alta · 7.8 CWE-1220 14/07/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVE-2026-55005 Alta · 8.8 CWE-122 14/07/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVE-2026-47631 Média · 5.4 CWE-79 09/06/2026

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-45583 Alta · 8.1 CWE-94 09/06/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVE-2026-45504 Alta · 8.8 CWE-918 09/06/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-45503 Média · 6.5 CWE-918 09/06/2026

Microsoft Exchange Server Information Disclosure Vulnerability

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.