Summary
Ein Angreifer kann mehrere Schwachstellen in Microsoft Exchange Server ausnutzen, um beliebigen Code auszuführen, Spoofing-Angriffe durchzuführen, erweiterte Berechtigungen zu erlangen, Daten zu manipulieren oder offenzulegen sowie einen Denial-of-Service-Angriff zu verursachen.
Product
Exchange ist ein Groupware und Nachrichtensystem der Firma Microsoft.
Vulnerabilities 9
-
Critical 9.3
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
-
Critical 9.1
Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 8.8
Microsoft Exchange Server Remote Code Execution Vulnerability
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
-
High 8.1
Microsoft Exchange Server Remote Code Execution Vulnerability
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
-
High 8.1
Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
-
High 7.5
Microsoft Exchange Server Denial of Service Vulnerability
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
-
Medium 6.5
Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
-
Medium 6.5
Microsoft Exchange Server Tampering Vulnerability
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
-
Medium 5.9
Microsoft Exchange Server Information Disclosure Vulnerability
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
Revision history
-
#1
Initiale Fassung
References
-
Microsoft Leitfaden für Sicherheitsupdates
https://msrc.microsoft.com/update-guide/
-
Microsoft Security Advisory CVE-2026-69361
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69361
-
Microsoft Security Advisory CVE-2026-69380
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69380
-
Microsoft Security Advisory CVE-2026-69355
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69355
-
Microsoft Security Advisory CVE-2026-69378
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69378
-
Microsoft Security Advisory CVE-2026-69375
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69375
-
Microsoft Security Advisory CVE-2026-69382
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69382
-
Microsoft Security Advisory CVE-2026-69641
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69641
-
Microsoft Security Advisory CVE-2026-69356
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69356
-
Microsoft Security Advisory CVE-2026-55007
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55007