Multiple vulnerabilities in Microsoft Server Software

Description

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.

Original advisories

• CVE-2026-55005

• CVE-2026-55006
• CVE-2026-55008
• CVE-2026-55009

Exploitation

CVE list

• CVE-2026-55005
  critical
• CVE-2026-55006
  unknown
• CVE-2026-55008
  critical
• CVE-2026-55009
  unknown

KB list

• KB5103212

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com