Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Exchange ausnutzen, um beliebigen Programmcode auszuführen, erweiterte Berechtigungen zu erlangen oder Spoofing-Angriffe durchzuführen.
Product
Exchange ist ein Groupware und Nachrichtensystem der Firma Microsoft.
Vulnerabilities 4
-
Critical 9.6
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 7.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
-
High 7.8
Microsoft Exchange Server Elevation of Privilege Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-54998
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-54998
-
Microsoft Security Advisory CVE-2026-55009
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55009
-
Microsoft Security Advisory CVE-2026-55008
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55008
-
Microsoft Security Advisory CVE-2026-55006
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55006
-
Microsoft Security Advisory CVE-2026-55005
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55005