Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Filtered by product Exchange Online
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-54998 1 Microsoft 1 Exchange Online 2026-07-07 N/A 8.8 HIGH
Incorrect authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48582 1 Microsoft 1 Exchange Online 2026-06-24 N/A 9.6 CRITICAL
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
CVE-2026-48579 1 Microsoft 1 Exchange Online 2026-06-17 N/A 9.1 CRITICAL
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.