Microsoft Exchange: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 6

• Critical 9.3
  CVE-2026-70279

  Microsoft Exchange Server Spoofing Vulnerability

  Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026
• High 8.8
  CVE-2026-77910

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026
• High 8.1
  CVE-2026-70571

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026
• High 7.8
  CVE-2026-87692

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026
• High 7.8
  CVE-2026-87695

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026
• High 7.5
  CVE-2026-87696

  Microsoft Exchange Server Elevation of Privilege Vulnerability

  Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14
  Oct 13, 2026

Revision history

1. 2026-10-13 #1

   Initiale Fassung

References

• Microsoft Leitfaden für Sicherheitsupdates
  https://msrc.microsoft.com/update-guide/
• Microsoft Security Advisory CVE-2026-70571
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70571
• Microsoft Security Advisory CVE-2026-77910
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-77910
• Microsoft Security Advisory CVE-2026-87692
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87692
• Microsoft Security Advisory CVE-2026-87695
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695
• Microsoft Security Advisory CVE-2026-87696
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87696
• Microsoft Security Advisory CVE-2026-70279
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279
• Microsoft Security Advisory CVE-2026-96940
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96940