CVE-2026-55007: falha de alta gravidade em Microsoft Exchange Server 2019 Cumulative…
Microsoft Exchange Server Remote Code Execution Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 8.1epss 0.7%
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Microsoft Exchange Server 2019 Cumulative Update 14Microsoft · Microsoft Exchange Server 2019 Cumulative Update 15Microsoft · Microsoft Exchange Server Subscription Edition RTMCVEs relacionadas — Microsoft Exchange Server 2019 Cumulative…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-42897HIGHMicrosoft Exchange Server Spoofing VulnerabilityEPSS 70.7%KEVCVE-2024-21410CRITICALMicrosoft Exchange Server Elevation of Privilege VulnerabilityEPSS 12.7%KEVCVE-2026-45502MEDIUMMicrosoft Exchange Server Information Disclosure VulnerabilityEPSS 19.6%CVE-2024-49040HIGHMicrosoft Exchange Server Spoofing VulnerabilityEPSS 8.5%CVE-2026-21527MEDIUMMicrosoft Exchange Server Spoofing VulnerabilityEPSS 8.1%CVE-2025-53786HIGHMicrosoft Exchange Server Hybrid Deployment Elevation of Privilege VulnerabilityEPSS 7.6%