NCSC-2026-0234

csafNLncsc_nl

NLShown in its original language — a full translation is planned for a future version.

Kwetsbaarheden verholpen in Microsoft Exchange

view advisory published 2026-07-14

Microsoft heeft kwetsbaarheden verholpen in Exchange, zowel Online als on-premise.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2026-55009US——
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-55008US——
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network…
CVE-2026-55006US——
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
CVE-2026-55005US——
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-54998US—OT elevatedExploit
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan