Elevation of Privilege Vulnerability in Microsoft Exchange Server
CVE-2026-77910
8.8HIGH
Key Information:
What is CVE-2026-77910?
An elevation of privilege vulnerability exists in Microsoft Exchange Server due to incorrect authorization mechanisms. An authenticated attacker can exploit this flaw to gain elevated privileges across the network, which could allow them to access sensitive information or modify configurations. This vulnerability underscores the importance of ensuring robust authentication processes and applying patches promptly to mitigate such risks.
Affected Version(s)
Microsoft Exchange Server 2016 Cumulative Update 23 x64-based Systems 15.01.0.0 < 15.01.2507.077
Microsoft Exchange Server 2019 Cumulative Update 14 x64-based Systems 15.02.0.0 < 15.02.1544.050
Microsoft Exchange Server 2019 Cumulative Update 15 x64-based Systems 15.02.0.0 < 15.02.1748.055