CVE-2026-96940

Vendor

Microsoft

Product

exchange

CVSS

8.8

EPSS

0.005 (p40)

Exposure class

Email

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 54
   Tenable research Tenable 18d ago

   Microsoft’s October 2026 Patch Tuesday addresses 1407 CVEs (CVE-2026-96951)

   69 Critical 1337 Important 0 Moderate 1 Low Microsoft addresses 1407 CVEs in the tenth Patch Tuesday of 2026, marking the second consecutive month to reset the bar as the largest Patch Tuesday release. This month’s updates…

   Exploited CVSS 8.8 Fix available CVE-2026-96951CVE-2026-21510CVE-2026-32202+20 more Microsoft
2. 40
   CVE NVD 29d ago

   Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.

   Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.

   CVSS 8.8 CVE-2026-96940 Microsoft
3. 38
   Advisory MSRC 29d ago

   CVE-2026-96940 Microsoft Exchange Server Elevation of Privilege Vulnerability

   Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.

   CVE-2026-96940 Microsoft