CVE-2026-55007

Vendor

Microsoft

Product

exchange

CVSS

8.1

EPSS

0.039 (p90)

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 64
   Research ZDI 8 Sep 2026

   The September 2026 Security Update Review

   Whelp, here we are. Deep into the new normal. With nearly 1,000 CVEs coming out from Microsoft and a healthy release from Adobe as well, there’s a phrase from my military days that comes to mind: embrace the suck. Take an…

   Exploited CVSS 10.0 Fix available CVE-2026-75650CVE-2026-81963CVE-2026-85880+57 more Microsoft Adobe
2. 34
   CVE NVD 8 Sep 2026

   Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

   Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

   CVSS 8.1 CVE-2026-55007 Microsoft
3. 26
   Advisory MSRC 8 Sep 2026

   CVE-2026-55007 Microsoft Exchange Server Remote Code Execution Vulnerability

   Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

   CVE-2026-55007 Microsoft