https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-96940.htmlhttps://patchthecve.com/cve/CVE-2026-96940.htmlThu, 15 Oct 2026 02:35:54 +0000HIGH 8.8: Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-69641.htmlhttps://patchthecve.com/cve/CVE-2026-69641.htmlTue, 22 Sep 2026 12:23:27 +0000CRITICAL 9.1: Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-69382.htmlhttps://patchthecve.com/cve/CVE-2026-69382.htmlTue, 29 Sep 2026 15:05:31 +0000MEDIUM 5.9: Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.https://patchthecve.com/cve/CVE-2026-69380.htmlhttps://patchthecve.com/cve/CVE-2026-69380.htmlTue, 29 Sep 2026 15:17:09 +0000HIGH 8.1: Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-69378.htmlhttps://patchthecve.com/cve/CVE-2026-69378.htmlTue, 29 Sep 2026 15:54:45 +0000HIGH 7.5: Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.https://patchthecve.com/cve/CVE-2026-69375.htmlhttps://patchthecve.com/cve/CVE-2026-69375.htmlTue, 29 Sep 2026 15:55:25 +0000MEDIUM 6.5: Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.https://patchthecve.com/cve/CVE-2026-69361.htmlhttps://patchthecve.com/cve/CVE-2026-69361.htmlTue, 29 Sep 2026 20:20:52 +0000MEDIUM 6.5: Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2026-69356.htmlhttps://patchthecve.com/cve/CVE-2026-69356.htmlWed, 30 Sep 2026 12:29:48 +0000CRITICAL 9.3: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2026-69355.htmlhttps://patchthecve.com/cve/CVE-2026-69355.htmlWed, 30 Sep 2026 12:30:17 +0000HIGH 8.8: External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-55007.htmlhttps://patchthecve.com/cve/CVE-2026-55007.htmlMon, 05 Oct 2026 17:11:46 +0000HIGH 8.1: Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-65813.htmlhttps://patchthecve.com/cve/CVE-2026-65813.htmlMon, 17 Aug 2026 12:58:02 +0000MEDIUM 6.5: Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-62915.htmlhttps://patchthecve.com/cve/CVE-2026-62915.htmlFri, 14 Aug 2026 15:21:48 +0000MEDIUM 6.5: Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.https://patchthecve.com/cve/CVE-2026-62914.htmlhttps://patchthecve.com/cve/CVE-2026-62914.htmlThu, 13 Aug 2026 18:57:33 +0000HIGH 7.3: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.https://patchthecve.com/cve/CVE-2026-62913.htmlhttps://patchthecve.com/cve/CVE-2026-62913.htmlFri, 14 Aug 2026 16:32:17 +0000HIGH 8.8: Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.https://patchthecve.com/cve/CVE-2026-62912.htmlhttps://patchthecve.com/cve/CVE-2026-62912.htmlThu, 13 Aug 2026 18:57:36 +0000MEDIUM 6.5: Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.https://patchthecve.com/cve/CVE-2026-62911.htmlhttps://patchthecve.com/cve/CVE-2026-62911.htmlWed, 14 Oct 2026 22:10:00 +0000HIGH 8.0: Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-62910.htmlhttps://patchthecve.com/cve/CVE-2026-62910.htmlFri, 14 Aug 2026 15:27:01 +0000HIGH 7.2: Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.https://patchthecve.com/cve/CVE-2026-42897.htmlhttps://patchthecve.com/cve/CVE-2026-42897.htmlMon, 26 Oct 2026 14:10:00 +0000HIGH 8.1: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.