IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.8High

CVE-2026-87692Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23; Microsoft Microsoft Exchange Server 2019 Cumulative Update 14; Microsoft Microsoft Exchange Serv… Published: (1 month ago)

Description

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Weakness (CWE): CWE-502

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
microsoft exchange server 2016
microsoft exchange server 2016 15.01.0.0 – < 15.01.2507.077
microsoft exchange server 2019 15.02.0.0 – < 15.02.1544.050
microsoft exchange server se 15.02.0.0 – < 15.02.2562.056
microsoft exchange server subscription edition < 15.02.2562.056
Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 15.01.0.0 – < 15.01.2507.077
Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 15.02.0.0 – < 15.02.1544.050
Microsoft Microsoft Exchange Server Subscription Edition RTM 15.02.0.0 – < 15.02.2562.056

References and patches

CPE matches (NVD) (3)
  • cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*
  • cpe:2.3:a:microsoft:exchange_server_subscription_edition:*:*:*:*:*:*:*:* < 15.02.2562.056

Recent CVEs in the same product — Microsoft Exchange Server