CVE-2026-87695 Microsoft Exchange Server Elevation of Privilege Vulnerability

Tillverkarens beskrivning (engelska)

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Referensdata

Tillverkare

Microsoft

Berörda produkter

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• Microsoft Exchange Server 2019 Cumulative Update 15
• Microsoft Exchange Server Subscription Edition RTM

CVSS 3.1

7.8 (HIGH)

Vektor

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Typ av svaghet

CWE-829: Inclusion of Functionality from Untrusted Control Sphere

Publicerad

13 oktober 2026

Officiella källor

• CVE.org
• NVD
• Tillverkarens advisory

← Alla sårbarheter