Elevation of Privilege Vulnerability in Microsoft Exchange Server
CVE-2025-64666
7.5HIGH
Key Information:
What is CVE-2025-64666?
An input validation flaw in Microsoft Exchange Server enables authorized attackers to exploit the vulnerability and escalate their privileges over the network, potentially leading to unauthorized access to sensitive information and control over server functionalities. This vulnerability highlights the importance of safeguarding against input-related issues to maintain the integrity and security of mail systems.
Affected Version(s)
Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.063
Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.037
Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.042