7.1Alta
Microsoft Exchange Server Spoofing Vulnerability
Microsoft Microsoft Exchange Server Subscription Edition RTM
Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
8.8Alta
CVE-2026-118207Microsoft Exchange Server Remote Code Execution Vulnerability
Descripción
Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
Debilidad (CWE):
CWE-706
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| microsoft | exchange server se | 15.02.0.0 – < 15.02.2562.057 | |
| Microsoft | Microsoft Exchange Server Subscription Edition RTM | 15.02.0.0 – < 15.02.2562.057 |
Referencias y parches
- Microsoft Exchange Server Remote Code Execution Vulnerability vendor-advisorypatch