Skip to content

CVE record · 2 sources

CVE-2026-118207

CVSS 8.8

Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Vendor: Microsoft
Product: Microsoft Exchange Server Subscription Edition RTM
CVSS v3.1: 8.8 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness: CWE-706
Exposure class: Email

Coverage

2

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

46

CVE NVD 2h ago

Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVSS 8.8 CVE-2026-118207 Microsoft
34

Qualys TRU Qualys 1h ago

Microsoft Patch Tuesday, November 2026 Security Update Review

As the year approaches its final stretch, Microsoft’s November 2026 Patch Tuesday highlights the continued importance of proactive vulnerability management. This month’s security updates address vulnerabilities across the…

Fix available CVE-2026-124194 CVE-2026-120003 CVE-2026-118148+57 more Microsoft