Elevation of Privilege Vulnerability in Microsoft Exchange Server
CVE-2025-64666

7.5HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Exchange Server 2019 Cumulative Update 15
Microsoft Exchange Server 2016 Cumulative Update 23
Microsoft Exchange Server Subscription Edition Rtm
Microsoft Exchange Server 2019 Cumulative Update 14
Vendor
CVE Published:
9 December 2025

What is CVE-2025-64666?

An input validation flaw in Microsoft Exchange Server enables authorized attackers to exploit the vulnerability and escalate their privileges over the network, potentially leading to unauthorized access to sensitive information and control over server functionalities. This vulnerability highlights the importance of safeguarding against input-related issues to maintain the integrity and security of mail systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.063

Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.037

Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.042

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.