Multiple vulnerabilities in Microsoft Server Software

Description

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remotely to execute arbitrary code.
2. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
3. A tampering vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
4. A denial of service vulnerability in Microsoft Exchange Server can be exploited remotely to cause denial of service.
5. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
6. An information disclosure vulnerability in Microsoft Exchange Server can be exploited remotely to obtain sensitive information.

Original advisories

• CVE-2026-55007

• CVE-2026-69355
• CVE-2026-69356
• CVE-2026-69361
• CVE-2026-69375
• CVE-2026-69378
• CVE-2026-69380
• CVE-2026-69382
• CVE-2026-69641

Exploitation

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2026-55007
  critical
• CVE-2026-69355
  critical
• CVE-2026-69356
  unknown
• CVE-2026-69361
  high
• CVE-2026-69375
  unknown
• CVE-2026-69378
  unknown
• CVE-2026-69380
  critical
• CVE-2026-69382
  unknown
• CVE-2026-69641
  critical

KB list

• 5121608

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com