8.8

CVE-2026-62910

Medienbericht

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version 2016 Update -
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_1
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_10
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_11
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_12
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_13
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_14
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_15
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_16
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_17
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_18
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_19
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_2
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_20
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_21
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_22
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_3
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_4
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_5
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_6
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_7
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_8
Microsoft ≫ Exchange Server Version 2016 Update cumulative_update_9
Microsoft ≫ Exchange Server Version 2019 Update -
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_1
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_10
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_11
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_12
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_13
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_2
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_3
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_4
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_5
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_6
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_7
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_8
Microsoft ≫ Exchange Server Version 2019 Update cumulative_update_9
Microsoft ≫ Exchange Server Subscription Edition Version < 15.02.2562.046
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.68% 0.493
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.8 2.8 5.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Microsoft 7.2 1.2 5.9
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-99 Improper Control of Resource Identifiers ('Resource Injection')

The product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control.

Für Zugriff zu Vulnerability Intelligence ist ein VulnDex Zugang erforderlich.
VulnDex Intel
Media Report
11.08.2026 20:25
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-62910
Patch
Vendor Advisory