← Database

CVE-2026-55006

HIGH CVSS: 7.8 Published: 2026-07-14 Modified: 2026-07-24

Description

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Affected Platforms

Microsoft Exchange ServerMicrosoft Exchange Server Subscription Edition

Weakness Type

CWE-1220

References