Exchange Online

exchange_online

Vendor: Microsoft • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2026-54998 1Microsoft 1Exchange Online Jul 7, 2026 Jul 2, 2026 N/A· v4 8.8 HIGH· v3 N/A· v2 Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48582 1Microsoft 1Exchange Online Jun 24, 2026 Jun 19, 2026 N/A· v4 9.6 CRITICAL· v3 N/A· v2 Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48579 1Microsoft 1Exchange Online Jul 23, 2026 Jun 4, 2026 N/A· v4 7.5 HIGH· v3 N/A· v2 Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.