Advisories · Technology

Microsoft Exchange Online.

Every CVE that names Microsoft Exchange Online among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96185 CVE record

CVSS 7.5 High

Microsoft Exchange Online Remote Code Execution Vulnerability
- Microsoft Exchange Online
- Memory corruption
Not analysed yet 22 Oct 2026
CVE-2026-65801 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Exchange Online Elevation of Privilege Vulnerability
- Microsoft Exchange Online
- Server-side request forgery (SSRF)
Not analysed yet 20 Aug 2026
CVE-2026-56191 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Microsoft Exchange Online Tampering Vulnerability
- Microsoft Exchange Online
- Authentication bypass
Not analysed yet 24 Jul 2026
CVE-2026-54998 CVE record

CVSS 8.8 High

Microsoft Exchange Online Elevation of Privilege Vulnerability
- Microsoft Exchange Online
- Broken access control
Not analysed yet 2 Jul 2026
CVE-2026-48582 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Microsoft Exchange Online Elevation of Privilege Vulnerability
- Microsoft Exchange Online
- Broken access control
Not analysed yet 19 Jun 2026
CVE-2026-48579 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Exchange Online Information Disclosure Vulnerability
- Microsoft Exchange Online
- Broken access control
Not analysed yet 4 Jun 2026
CVE-2026-26137 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Microsoft Exchange Elevation of Privilege Vulnerability
- Microsoft Exchange Online
- Server-side request forgery (SSRF)
Not analysed yet 19 Mar 2026