Exchange Online

exchange_online

Vendor: Microsoft • 5 CVEs

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-65801 1Microsoft 1Exchange Online Aug 24, 2026 Aug 20, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-56191 1Microsoft 1Exchange Online Jul 29, 2026 Jul 24, 2026 N/A· v4 10.0 CRITICAL· v3 N/A· v2 Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
CVE-2026-54998 1Microsoft 1Exchange Online Jul 7, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48582 1Microsoft 1Exchange Online Jun 24, 2026 Jun 19, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48579 1Microsoft 1Exchange Online Jul 23, 2026 Jun 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.