CVE-2026-62912 Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a…

Description

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Microsoft Exchange Server 2016 Cumulative Update 23 15.01	15.01.0.0 → < 15.01.2507.072	15.01.2507.072
Microsoft Exchange Server 2019 Cumulative Update 14 15.02	15.02.0.0 → < 15.02.1544.044	15.02.1544.044
Microsoft Exchange Server 2019 Cumulative Update 15 15.02	15.02.0.0 → < 15.02.1748.049	15.02.1748.049
Microsoft Exchange Server Subscription Edition RTM 15.02	15.02.0.0 → < 15.02.2562.046	15.02.2562.046

Autres CVE de Microsoft Exchange Server 2016 Cumulative Update 23

Les 88 CVE de Microsoft Exchange Server 2016 Cumulative Update 23 →

CVE-2026-87695 Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to… 7.8 Élevée CVE-2026-87692 Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges… 7.8 Élevée CVE-2026-70279 Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows… 9.3 Critique CVE-2026-87696 Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate… 7.5 Élevée