CVE-2026-87692 Microsoft Exchange Server Elevation of Privilege Vulnerability

Produsentens beskrivelse (engelsk)

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Referansedata

Produsent

Microsoft

Berørte produkter

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• Microsoft Exchange Server Subscription Edition RTM

CVSS 3.1

7.8 (HIGH)

Vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Type svakhet

CWE-502: Deserialization of Untrusted Data

Publisert

13. oktober 2026

Offisielle kilder

• CVE.org
• NVD
• Produsentens advisory

← Alle sårbarheter