CVE Daily – Microsoft Exchange (High+Critical) https://cvedaily.com/pages/tags/msexchange.html CVE Daily – Microsoft Exchange (High+Critical) en Wed, 03 Jun 2026 21:26:46 +0000 [High] CVE-2026-42897 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2026-42897 https://nvd.nist.gov/vuln/detail/CVE-2026-42897 Thu, 14 May 2026 18:16:49 +0000 High CVE-2026-42897

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 8.1 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2026-26137 – Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized at... https://nvd.nist.gov/vuln/detail/CVE-2026-26137 https://nvd.nist.gov/vuln/detail/CVE-2026-26137 Thu, 19 Mar 2026 21:17:08 +0000 Critical CVE-2026-26137

Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.

CVSS: 9.9 · CWE: CWE-918

View on NVD

]]> [High] CVE-2025-58107 – In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on ... https://nvd.nist.gov/vuln/detail/CVE-2025-58107 https://nvd.nist.gov/vuln/detail/CVE-2025-58107 Mon, 02 Mar 2026 15:16:31 +0000 High CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password.

CVSS: 7.5 · CWE: CWE-319

View on NVD

]]> [High] CVE-2025-64666 – Improper input validation in Microsoft Exchange Server allows an authorized atta... https://nvd.nist.gov/vuln/detail/CVE-2025-64666 https://nvd.nist.gov/vuln/detail/CVE-2025-64666 Tue, 09 Dec 2025 18:16:05 +0000 High CVE-2025-64666

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-59249 – Weak authentication in Microsoft Exchange Server allows an authorized attacker t... https://nvd.nist.gov/vuln/detail/CVE-2025-59249 https://nvd.nist.gov/vuln/detail/CVE-2025-59249 Tue, 14 Oct 2025 17:16:07 +0000 High CVE-2025-59249

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-1390

View on NVD

]]> [High] CVE-2025-59248 – Improper input validation in Microsoft Exchange Server allows an unauthorized at... https://nvd.nist.gov/vuln/detail/CVE-2025-59248 https://nvd.nist.gov/vuln/detail/CVE-2025-59248 Tue, 14 Oct 2025 17:16:06 +0000 High CVE-2025-59248

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-53782 – Incorrect implementation of authentication algorithm in Microsoft Exchange Serve... https://nvd.nist.gov/vuln/detail/CVE-2025-53782 https://nvd.nist.gov/vuln/detail/CVE-2025-53782 Tue, 14 Oct 2025 17:15:44 +0000 High CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

CVSS: 8.4 · CWE: CWE-303

View on NVD

]]> [High] CVE-2025-33051 – Exposure of sensitive information to an unauthorized actor in Microsoft Exchange... https://nvd.nist.gov/vuln/detail/CVE-2025-33051 https://nvd.nist.gov/vuln/detail/CVE-2025-33051 Tue, 12 Aug 2025 18:15:28 +0000 High CVE-2025-33051

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [High] CVE-2024-49040 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49040 https://nvd.nist.gov/vuln/detail/CVE-2024-49040 Tue, 12 Nov 2024 18:15:44 +0000 High CVE-2024-49040

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 7.5 · CWE: CWE-451

View on NVD

]]> [High] CVE-2024-26198 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-26198 https://nvd.nist.gov/vuln/detail/CVE-2024-26198 Tue, 12 Mar 2024 17:15:58 +0000 High CVE-2024-26198

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-426

View on NVD

]]> [Critical] CVE-2024-21410 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-21410 https://nvd.nist.gov/vuln/detail/CVE-2024-21410 Tue, 13 Feb 2024 18:15:59 +0000 Critical CVE-2024-21410

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [High] CVE-2023-36439 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36439 https://nvd.nist.gov/vuln/detail/CVE-2023-36439 Tue, 14 Nov 2023 18:15:47 +0000 High CVE-2023-36439

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36050 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36050 https://nvd.nist.gov/vuln/detail/CVE-2023-36050 Tue, 14 Nov 2023 18:15:36 +0000 High CVE-2023-36050

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36039 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36039 https://nvd.nist.gov/vuln/detail/CVE-2023-36039 Tue, 14 Nov 2023 18:15:33 +0000 High CVE-2023-36039

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36035 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36035 https://nvd.nist.gov/vuln/detail/CVE-2023-36035 Tue, 14 Nov 2023 18:15:32 +0000 High CVE-2023-36035

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36778 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36778 https://nvd.nist.gov/vuln/detail/CVE-2023-36778 Tue, 10 Oct 2023 18:15:17 +0000 High CVE-2023-36778

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-426

View on NVD

]]> [High] CVE-2023-36757 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36757 https://nvd.nist.gov/vuln/detail/CVE-2023-36757 Tue, 12 Sep 2023 17:15:11 +0000 High CVE-2023-36757

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36756 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36756 https://nvd.nist.gov/vuln/detail/CVE-2023-36756 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36756

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36745 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36745 https://nvd.nist.gov/vuln/detail/CVE-2023-36745 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36745

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36744 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36744 https://nvd.nist.gov/vuln/detail/CVE-2023-36744 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36744

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-38185 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38185 https://nvd.nist.gov/vuln/detail/CVE-2023-38185 Tue, 08 Aug 2023 18:15:23 +0000 High CVE-2023-38185

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-23

View on NVD

]]> [High] CVE-2023-38182 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38182 https://nvd.nist.gov/vuln/detail/CVE-2023-38182 Tue, 08 Aug 2023 18:15:22 +0000 High CVE-2023-38182

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-38181 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38181 https://nvd.nist.gov/vuln/detail/CVE-2023-38181 Tue, 08 Aug 2023 18:15:22 +0000 High CVE-2023-38181

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-35388 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-35388 https://nvd.nist.gov/vuln/detail/CVE-2023-35388 Tue, 08 Aug 2023 18:15:13 +0000 High CVE-2023-35388

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-35368 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-35368 https://nvd.nist.gov/vuln/detail/CVE-2023-35368 Tue, 08 Aug 2023 18:15:12 +0000 High CVE-2023-35368

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2023-21709 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21709 https://nvd.nist.gov/vuln/detail/CVE-2023-21709 Tue, 08 Aug 2023 18:15:11 +0000 Critical CVE-2023-21709

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-307

View on NVD

]]> [High] CVE-2023-32031 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-32031 https://nvd.nist.gov/vuln/detail/CVE-2023-32031 Wed, 14 Jun 2023 15:15:10 +0000 High CVE-2023-32031

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-28310 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-28310 https://nvd.nist.gov/vuln/detail/CVE-2023-28310 Wed, 14 Jun 2023 15:15:09 +0000 High CVE-2023-28310

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21710 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21710 https://nvd.nist.gov/vuln/detail/CVE-2023-21710 Tue, 14 Feb 2023 20:15:14 +0000 High CVE-2023-21710

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21707 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21707 https://nvd.nist.gov/vuln/detail/CVE-2023-21707 Tue, 14 Feb 2023 20:15:13 +0000 High CVE-2023-21707

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21706 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21706 https://nvd.nist.gov/vuln/detail/CVE-2023-21706 Tue, 14 Feb 2023 20:15:13 +0000 High CVE-2023-21706

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21529 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21529 https://nvd.nist.gov/vuln/detail/CVE-2023-21529 Tue, 14 Feb 2023 20:15:11 +0000 High CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21764 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21764 https://nvd.nist.gov/vuln/detail/CVE-2023-21764 Tue, 10 Jan 2023 22:15:19 +0000 High CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: CWE-426

View on NVD

]]> [High] CVE-2023-21763 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21763 https://nvd.nist.gov/vuln/detail/CVE-2023-21763 Tue, 10 Jan 2023 22:15:19 +0000 High CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: CWE-426

View on NVD

]]> [High] CVE-2023-21762 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21762 https://nvd.nist.gov/vuln/detail/CVE-2023-21762 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21762

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21761 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21761 https://nvd.nist.gov/vuln/detail/CVE-2023-21761 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21761

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 7.5 · CWE: CWE-918

View on NVD

]]> [High] CVE-2023-21745 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21745 https://nvd.nist.gov/vuln/detail/CVE-2023-21745 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21745

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2022-41123 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41123 https://nvd.nist.gov/vuln/detail/CVE-2022-41123 Wed, 09 Nov 2022 22:15:25 +0000 High CVE-2022-41123

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41080 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41080 https://nvd.nist.gov/vuln/detail/CVE-2022-41080 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41080

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41079 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41079 https://nvd.nist.gov/vuln/detail/CVE-2022-41079 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41079

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41078 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41078 https://nvd.nist.gov/vuln/detail/CVE-2022-41078 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41078

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41082 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41082 https://nvd.nist.gov/vuln/detail/CVE-2022-41082 Mon, 03 Oct 2022 01:15:08 +0000 High CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2022-41040 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41040 https://nvd.nist.gov/vuln/detail/CVE-2022-41040 Mon, 03 Oct 2022 01:15:08 +0000 High CVE-2022-41040

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-918

View on NVD

]]> [High] CVE-2022-24516 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-24516 https://nvd.nist.gov/vuln/detail/CVE-2022-24516 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-24516

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-24477 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-24477 https://nvd.nist.gov/vuln/detail/CVE-2022-24477 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-24477

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-21980 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21980 https://nvd.nist.gov/vuln/detail/CVE-2022-21980 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-21980

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-37851 – Local privilege escalation in Windows products of ESET allows user who is logged... https://nvd.nist.gov/vuln/detail/CVE-2021-37851 https://nvd.nist.gov/vuln/detail/CVE-2021-37851 Wed, 11 May 2022 15:15:08 +0000 High CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Prem…

CVSS: 7.3 · CWE: CWE-280

View on NVD

]]> [High] CVE-2022-21978 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21978 https://nvd.nist.gov/vuln/detail/CVE-2022-21978 Tue, 10 May 2022 21:15:09 +0000 High CVE-2022-21978

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.2 · CWE: N/A

View on NVD

]]> [High] CVE-2022-27167 – Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. all... https://nvd.nist.gov/vuln/detail/CVE-2022-27167 https://nvd.nist.gov/vuln/detail/CVE-2022-27167 Tue, 10 May 2022 20:15:09 +0000 High CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11…

CVSS: 7.1 · CWE: CWE-280

View on NVD

]]> [High] CVE-2022-23277 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-23277 https://nvd.nist.gov/vuln/detail/CVE-2022-23277 Wed, 09 Mar 2022 17:15:11 +0000 High CVE-2022-23277

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2022-21969 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21969 https://nvd.nist.gov/vuln/detail/CVE-2022-21969 Tue, 11 Jan 2022 21:15:14 +0000 Critical CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2022-21855 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21855 https://nvd.nist.gov/vuln/detail/CVE-2022-21855 Tue, 11 Jan 2022 21:15:10 +0000 Critical CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2022-21846 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21846 https://nvd.nist.gov/vuln/detail/CVE-2022-21846 Tue, 11 Jan 2022 21:15:09 +0000 Critical CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-42321 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-42321 https://nvd.nist.gov/vuln/detail/CVE-2021-42321 Wed, 10 Nov 2021 01:19:50 +0000 High CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-41348 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-41348 https://nvd.nist.gov/vuln/detail/CVE-2021-41348 Wed, 13 Oct 2021 01:15:13 +0000 High CVE-2021-41348

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: CWE-269

View on NVD

]]> [High] CVE-2021-34453 – Microsoft Exchange Server Denial of Service Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34453 https://nvd.nist.gov/vuln/detail/CVE-2021-34453 Wed, 13 Oct 2021 01:15:09 +0000 High CVE-2021-34453

Microsoft Exchange Server Denial of Service Vulnerability

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-26427 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26427 https://nvd.nist.gov/vuln/detail/CVE-2021-26427 Wed, 13 Oct 2021 01:15:09 +0000 Critical CVE-2021-26427

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-34523 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34523 https://nvd.nist.gov/vuln/detail/CVE-2021-34523 Wed, 14 Jul 2021 18:15:12 +0000 Critical CVE-2021-34523

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-34473 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34473 https://nvd.nist.gov/vuln/detail/CVE-2021-34473 Wed, 14 Jul 2021 18:15:11 +0000 Critical CVE-2021-34473

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: CWE-918

View on NVD

]]> [High] CVE-2021-34470 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34470 https://nvd.nist.gov/vuln/detail/CVE-2021-34470 Wed, 14 Jul 2021 18:15:11 +0000 High CVE-2021-34470

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-33768 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-33768 https://nvd.nist.gov/vuln/detail/CVE-2021-33768 Wed, 14 Jul 2021 18:15:10 +0000 High CVE-2021-33768

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-33766 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-33766 https://nvd.nist.gov/vuln/detail/CVE-2021-33766 Wed, 14 Jul 2021 18:15:10 +0000 High CVE-2021-33766

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 7.3 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31206 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31206 https://nvd.nist.gov/vuln/detail/CVE-2021-31206 Wed, 14 Jul 2021 18:15:09 +0000 High CVE-2021-31206

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.6 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31196 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31196 https://nvd.nist.gov/vuln/detail/CVE-2021-31196 Wed, 14 Jul 2021 18:15:09 +0000 High CVE-2021-31196

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31198 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31198 https://nvd.nist.gov/vuln/detail/CVE-2021-31198 Tue, 11 May 2021 19:15:10 +0000 High CVE-2021-31198

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2021-28483 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28483 https://nvd.nist.gov/vuln/detail/CVE-2021-28483 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28483

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-28482 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28482 https://nvd.nist.gov/vuln/detail/CVE-2021-28482 Tue, 13 Apr 2021 20:15:21 +0000 High CVE-2021-28482

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-28481 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28481 https://nvd.nist.gov/vuln/detail/CVE-2021-28481 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28481

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-28480 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28480 https://nvd.nist.gov/vuln/detail/CVE-2021-28480 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28480

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-27078 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-27078 https://nvd.nist.gov/vuln/detail/CVE-2021-27078 Wed, 03 Mar 2021 00:15:12 +0000 Critical CVE-2021-27078

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2021-27065 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-27065 https://nvd.nist.gov/vuln/detail/CVE-2021-27065 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-27065

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-22

View on NVD

]]> [High] CVE-2021-26858 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26858 https://nvd.nist.gov/vuln/detail/CVE-2021-26858 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-26858

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-26857 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26857 https://nvd.nist.gov/vuln/detail/CVE-2021-26857 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2021-26855 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26855 https://nvd.nist.gov/vuln/detail/CVE-2021-26855 Wed, 03 Mar 2021 00:15:12 +0000 Critical CVE-2021-26855

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: CWE-918

View on NVD

]]> [Critical] CVE-2021-26412 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26412 https://nvd.nist.gov/vuln/detail/CVE-2021-26412 Wed, 03 Mar 2021 00:15:11 +0000 Critical CVE-2021-26412

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-17144 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17144 https://nvd.nist.gov/vuln/detail/CVE-2020-17144 Thu, 10 Dec 2020 00:15:16 +0000 High CVE-2020-17144

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.4 · CWE: CWE-502

View on NVD

]]> [High] CVE-2020-17143 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17143 https://nvd.nist.gov/vuln/detail/CVE-2020-17143 Thu, 10 Dec 2020 00:15:16 +0000 High CVE-2020-17143

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-17142 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17142 https://nvd.nist.gov/vuln/detail/CVE-2020-17142 Thu, 10 Dec 2020 00:15:15 +0000 Critical CVE-2020-17142

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-17141 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17141 https://nvd.nist.gov/vuln/detail/CVE-2020-17141 Thu, 10 Dec 2020 00:15:15 +0000 High CVE-2020-17141

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.4 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-17132 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17132 https://nvd.nist.gov/vuln/detail/CVE-2020-17132 Thu, 10 Dec 2020 00:15:15 +0000 Critical CVE-2020-17132

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-17084 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17084 https://nvd.nist.gov/vuln/detail/CVE-2020-17084 Wed, 11 Nov 2020 07:15:18 +0000 High CVE-2020-17084

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.5 · CWE: CWE-120

View on NVD

]]> [High] CVE-2020-16969 – <p>An information disclosure vulnerability exists in how Microsoft Exchange vali... https://nvd.nist.gov/vuln/detail/CVE-2020-16969 https://nvd.nist.gov/vuln/detail/CVE-2020-16969 Fri, 16 Oct 2020 23:15:16 +0000 High CVE-2020-16969

An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages. An attacker who successfully exploited the vulnerability could use this to gain further information from a user.

To exploit the vulnerability, an attacker could include specially crafted OWA messages that could be loaded, without warning or filtering, from the attack…

CVSS: 7.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-16875 – <p>A remote code execution vulnerability exists in Microsoft Exchange server due... https://nvd.nist.gov/vuln/detail/CVE-2020-16875 https://nvd.nist.gov/vuln/detail/CVE-2020-16875 Fri, 11 Sep 2020 17:15:17 +0000 High CVE-2020-16875

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.

An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised.

The security update addresses th…

CVSS: 8.4 · CWE: CWE-74

View on NVD

]]> [High] CVE-2012-6277 – Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as u... https://nvd.nist.gov/vuln/detail/CVE-2012-6277 https://nvd.nist.gov/vuln/detail/CVE-2012-6277 Fri, 21 Feb 2020 17:15:10 +0000 High CVE-2012-6277

Multiple unspecified vulnerabilities in Autonomy KeyView IDOL before 10.16, as used in Symantec Mail Security for Microsoft Exchange before 6.5.8, Symantec Mail Security for Domino before 8.1.1, Symantec Messaging Gateway before 10.0.1, Symantec Data Loss Prevention (DLP) before 11.6.1, IBM Notes 8.5.x, IBM Lotus Domino 8.5.x before 8.5.3 FP4, and other products, allow remote attackers to execute…

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2020-0692 – An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka... https://nvd.nist.gov/vuln/detail/CVE-2020-0692 https://nvd.nist.gov/vuln/detail/CVE-2020-0692 Tue, 11 Feb 2020 22:15:16 +0000 High CVE-2020-0692

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.

CVSS: 8.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-0688 – A remote code execution vulnerability exists in Microsoft Exchange software when... https://nvd.nist.gov/vuln/detail/CVE-2020-0688 https://nvd.nist.gov/vuln/detail/CVE-2020-0688 Tue, 11 Feb 2020 22:15:15 +0000 High CVE-2020-0688

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

CVSS: 8.8 · CWE: CWE-287

View on NVD

]]> [Critical] CVE-2019-1373 – A remote code execution vulnerability exists in Microsoft Exchange through the d... https://nvd.nist.gov/vuln/detail/CVE-2019-1373 https://nvd.nist.gov/vuln/detail/CVE-2019-1373 Tue, 12 Nov 2019 19:15:12 +0000 Critical CVE-2019-1373

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.

CVSS: 9.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2019-1233 – A denial of service vulnerability exists in Microsoft Exchange Server software w... https://nvd.nist.gov/vuln/detail/CVE-2019-1233 https://nvd.nist.gov/vuln/detail/CVE-2019-1233 Wed, 11 Sep 2019 22:15:15 +0000 High CVE-2019-1233

A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of Service Vulnerability'.

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [High] CVE-2019-1136 – An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka... https://nvd.nist.gov/vuln/detail/CVE-2019-1136 https://nvd.nist.gov/vuln/detail/CVE-2019-1136 Mon, 15 Jul 2019 19:15:21 +0000 High CVE-2019-1136

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.

CVSS: 8.1 · CWE: N/A

View on NVD

]]> [High] CVE-2019-0724 – An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka... https://nvd.nist.gov/vuln/detail/CVE-2019-0724 https://nvd.nist.gov/vuln/detail/CVE-2019-0724 Tue, 05 Mar 2019 23:29:02 +0000 High CVE-2019-0724

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686.

CVSS: 8.1 · CWE: N/A

View on NVD

]]> [High] CVE-2019-0686 – An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka... https://nvd.nist.gov/vuln/detail/CVE-2019-0686 https://nvd.nist.gov/vuln/detail/CVE-2019-0686 Tue, 05 Mar 2019 23:29:02 +0000 High CVE-2019-0686

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0724.

CVSS: 7.4 · CWE: N/A

View on NVD

]]> [Critical] CVE-2019-0586 – A remote code execution vulnerability exists in Microsoft Exchange software when... https://nvd.nist.gov/vuln/detail/CVE-2019-0586 https://nvd.nist.gov/vuln/detail/CVE-2019-0586 Tue, 08 Jan 2019 21:29:02 +0000 Critical CVE-2019-0586

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2018-8581 – An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka... https://nvd.nist.gov/vuln/detail/CVE-2018-8581 https://nvd.nist.gov/vuln/detail/CVE-2018-8581 Wed, 14 Nov 2018 01:29:01 +0000 High CVE-2018-8581

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

CVSS: 7.4 · CWE: N/A

View on NVD

]]> [High] CVE-2018-8265 – A remote code execution vulnerability exists in the way Microsoft Exchange softw... https://nvd.nist.gov/vuln/detail/CVE-2018-8265 https://nvd.nist.gov/vuln/detail/CVE-2018-8265 Wed, 10 Oct 2018 13:29:01 +0000 High CVE-2018-8265

A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution Vulnerability." This affects Microsoft Exchange Server.

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [High] CVE-2018-16793 – Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SS... https://nvd.nist.gov/vuln/detail/CVE-2018-16793 https://nvd.nist.gov/vuln/detail/CVE-2018-16793 Fri, 21 Sep 2018 16:29:01 +0000 High CVE-2018-16793

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access) login page.

CVSS: 8.6 · CWE: CWE-918

View on NVD

]]> [Critical] CVE-2018-8302 – A remote code execution vulnerability exists in Microsoft Exchange software when... https://nvd.nist.gov/vuln/detail/CVE-2018-8302 https://nvd.nist.gov/vuln/detail/CVE-2018-8302 Wed, 15 Aug 2018 17:29:03 +0000 Critical CVE-2018-8302

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [Critical] CVE-2018-8154 – A remote code execution vulnerability exists in Microsoft Exchange software when... https://nvd.nist.gov/vuln/detail/CVE-2018-8154 https://nvd.nist.gov/vuln/detail/CVE-2018-8154 Wed, 09 May 2018 19:29:02 +0000 Critical CVE-2018-8154

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.

CVSS: 9.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2018-0986 – A remote code execution vulnerability exists when the Microsoft Malware Protecti... https://nvd.nist.gov/vuln/detail/CVE-2018-0986 https://nvd.nist.gov/vuln/detail/CVE-2018-0986 Wed, 04 Apr 2018 17:29:01 +0000 High CVE-2018-0986

A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsof…

CVSS: 8.8 · CWE: CWE-787

View on NVD

]]> [High] CVE-2017-11932 – Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow ... https://nvd.nist.gov/vuln/detail/CVE-2017-11932 https://nvd.nist.gov/vuln/detail/CVE-2017-11932 Tue, 12 Dec 2017 21:29:01 +0000 High CVE-2017-11932

Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka "Microsoft Exchange Spoofing Vulnerability".

CVSS: 8.1 · CWE: CWE-20

View on NVD

]]> [High] CVE-2017-11940 – The Microsoft Malware Protection Engine running on Microsoft Forefront and Micro... https://nvd.nist.gov/vuln/detail/CVE-2017-11940 https://nvd.nist.gov/vuln/detail/CVE-2017-11940 Fri, 08 Dec 2017 14:29:00 +0000 High CVE-2017-11940

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Windows 7 SP1, Windows 8.1, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, 1709 and Windows Server 2016, Windows Server, version 1709, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially crafted file leading to remote code execution. aka "Microsoft Malware Protection En…

CVSS: 7.8 · CWE: CWE-119

View on NVD

]]>