Multiple vulnerabilities in Microsoft Server Software

Description

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, perform cross-site scripting attack, spoof user interface.

Below is a complete list of vulnerabilities:

1. A remote code execution vulnerability in Microsoft Exchange Server can be exploited remotely to execute arbitrary code.
2. An elevation of privilege vulnerability in Microsoft Exchange Server can be exploited remotely to gain privileges.
3. A spoofing vulnerability in Microsoft Exchange Server can be exploited remotely to spoof user interface.
4. A denial of service vulnerability in Microsoft Exchange Server can be exploited remotely to cause denial of service.

Original advisories

• CVE-2026-118149

• CVE-2026-118150
• CVE-2026-118151
• CVE-2026-118152
• CVE-2026-118153
• CVE-2026-118154
• CVE-2026-118157
• CVE-2026-118207
• CVE-2026-118208

Exploitation

Related products

• Microsoft-Exchange-Server

CVE list

• CVE-2026-118149
  critical
• CVE-2026-118150
  critical
• CVE-2026-118151
  high
• CVE-2026-118152
  high
• CVE-2026-118153
  critical
• CVE-2026-118154
  critical
• CVE-2026-118157
  high
• CVE-2026-118207
  critical
• CVE-2026-118208
  high

KB list

• 5133453

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com