CVE-2026-21527

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_15:*:*:*:*:*:*

History

11 Feb 2026, 21:41

Type Values Removed Values Added
CPE cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_15:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*
cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*
First Time Microsoft exchange Server
Microsoft
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21527 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21527 - Vendor Advisory

10 Feb 2026, 18:16

Type Values Removed Values Added
New CVE

Information

Published : 2026-02-10 18:16

Updated : 2026-02-11 21:41


NVD link : CVE-2026-21527

Mitre link : CVE-2026-21527

CVE.ORG link : CVE-2026-21527


JSON object : View

Products Affected

microsoft

  • exchange_server
CWE
CWE-345

Insufficient Verification of Data Authenticity

CWE-451

User Interface (UI) Misrepresentation of Critical Information

CWE-1286

Improper Validation of Syntactic Correctness of Input