Skip to content

News The Register 3h ago

Microsoft Exchange Server 2016 and 2019 enter their 'permanently vulnerable' era

CVE-2026-118207 Microsoft Email

Upgrade, migrate, but don't prevaricate – time has run out

Read at The Register (security)

Vendor: Microsoft
Product: Exchange Server
Exposure class: Email

Why it ranks 47 (High)

Exposed product class: email
Widely deployed vendor product (Microsoft)
Covered by 6 independent sources
Reporting
Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.

Links

The Register (security) (theregister.com)
CVE-2026-118207 on this site · NVD · CVE.org · Vulnpedia

Related coverage

Other items that share a CVE or were clustered with this one.

38

Talos research Talos 40h ago

Microsoft Patch Tuesday for November 2026 — Snort rules and prominent vulnerabilities

Fix available CVE-2026-124194 CVE-2026-113862 CVE-2026-118146+57 more Microsoft Cisco
25

Qualys TRU Qualys 45h ago

Microsoft and Adobe Patch Tuesday, November 2026 Security Update Review

Fix available CVE-2026-124194 CVE-2026-120003 CVE-2026-118148+57 more Microsoft Adobe
49

CVE NVD 46h ago

Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVSS 8.8 CVE-2026-118207 Microsoft
70

Research ZDI 46h ago

The November 2026 Security Update Review

Exploited CVSS 10.0 Fix available CVE-2026-124194 CVE-2026-116928 CVE-2026-119958+57 more Microsoft Adobe
53

Tenable research Tenable 46h ago

Microsoft’s November 2026 Patch Tuesday addresses 1093 CVEs (CVE-2026-124194)

Exploited CVSS 6.5 Fix available CVE-2026-124194 CVE-2026-118146 CVE-2026-120002+17 more Microsoft