CVE-2026-70571 Microsoft Exchange Server Remote Code Execution Vulnerability

Vendor description

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Reference data

Vendor

Microsoft

Affected products

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• Microsoft Exchange Server 2019 Cumulative Update 15
• Microsoft Exchange Server Subscription Edition RTM

CVSS 3.1

8.1 (HIGH)

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Weakness type

CWE-121: Stack-based Buffer Overflow

Published

October 13, 2026

Official sources

• CVE.org
• NVD
• Vendor advisory

← All vulnerabilities