Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Microsoft Exchange ausnutzen, um erweiterte Rechte – einschließlich SYSTEM-Rechte – zu erlangen, Sicherheitsmaßnahmen zu umgehen, beliebigen Code auszuführen, Daten zu manipulieren oder offenzulegen, Spoofing-Angriffe durchzuführen und einen Denial-of-Service-Zustand auszulösen.
Product
Exchange ist ein Groupware und Nachrichtensystem der Firma Microsoft.
Vulnerabilities 7
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 8.0CVE-2026-62911 Public exploit
Microsoft Exchange Server Elevation of Privilege Vulnerability
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.3
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
High 7.2
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
Medium 6.5
Microsoft Exchange Server Denial of Service Vulnerability
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
-
Medium 6.5
Microsoft Exchange Server Security Feature Bypass Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
-
Medium 6.5
Microsoft Exchange Server Elevation of Privilege Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Revision history
-
#2
PoC aufgenommen CVE-2026-62911
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-62912
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62912
-
Microsoft Security Advisory CVE-2026-62910
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62910
-
Microsoft Security Advisory CVE-2026-62914
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62914
-
Microsoft Security Advisory CVE-2026-62915
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62915
-
Microsoft Security Advisory CVE-2026-62911
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62911
-
Microsoft Security Advisory CVE-2026-65813
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65813
-
Microsoft Security Advisory CVE-2026-62913
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62913
-
PoC CVE-2026-62911
https://github.com/hypnguyen1209/CVE-2026-62911