CVE-2026-77910

CVE-2026-77910 · Microsoft Exchange Server Elevation of Privilege Vulnerability

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS 8.8 · High · EPSS 0.8% · Fix available

Affected products and versions

microsoft exchange server 2016 cumulative update 23
Versions
- ≥ 15.01.0.0, < 15.01.2507.077: Affected (custom)
Update to 15.01.2507.077
microsoft exchange server 2019 cumulative update 14
Versions
- ≥ 15.02.0.0, < 15.02.1544.050: Affected (custom)
Update to 15.02.1544.050
microsoft exchange server 2019 cumulative update 15
Versions
- ≥ 15.02.0.0, < 15.02.1748.055: Affected (custom)
Update to 15.02.1748.055
microsoft exchange server subscription edition rtm
Versions
- ≥ 15.02.0.0, < 15.02.2562.056: Affected (custom)
Update to 15.02.2562.056