CVE Intelligence

Vulnerabilidades do Microsoft Microsoft Exchange Server Subscription Edition RTM

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Microsoft Exchange Server Subscription Edition RTM: 41 registro(s), com versões afetadas e correções.

CVE-2026-55006 Alta · 7.8 CWE-1220 14/07/2026
Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-55005 Alta · 8.8 CWE-122 14/07/2026
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-47631 Média · 5.4 CWE-79 09/06/2026
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-45583 Alta · 8.1 CWE-94 09/06/2026
Microsoft Exchange Server Remote Code Execution Vulnerability
Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-45504 Alta · 8.8 CWE-918 09/06/2026
Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-45503 Média · 6.5 CWE-918 09/06/2026
Microsoft Exchange Server Information Disclosure Vulnerability
Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
CVE-2026-45502 Média · 5.0 CWE-918 09/06/2026
Microsoft Exchange Server Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
CVE-2026-45501 Média · 6.1 CWE-79 09/06/2026
Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-45500 Média · 6.1 CWE-79 09/06/2026
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42897 Média · 6.1 KEV Alta · 50 Exploit público CWE-79 14/05/2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21527 Média · 6.5 CWE-345 10/02/2026
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64667 Média · 5.3 CWE-451 09/12/2025
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64666 Alta · 7.5 CWE-20 09/12/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59249 Alta · 8.8 CWE-1390 14/10/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59248 Alta · 7.5 CWE-20 14/10/2025
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53782 Alta · 7.8 CWE-303 14/10/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.