CVE-2026-62910 Microsoft Exchange Server Elevation of Privilege Vulnerability
7.2
Analys på rafaelpfister.ch
Tillverkarens beskrivning (engelska)
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. Referensdata
- Tillverkare
- Microsoft
- Berörda produkter
- Microsoft Exchange Server 2016 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 14
- Microsoft Exchange Server 2019 Cumulative Update 15
- Microsoft Exchange Server Subscription Edition RTM
- CVSS 3.1
- 7.2 (HIGH)
- Vektor
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C- Typ av svaghet
- CWE-99: Improper Control of Resource Identifiers ('Resource Injection')
- Publicerad
- 11 augusti 2026
