CVE-2026-96185
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Risk Assessment
An attacker with valid credentials could exploit the buffer overflow to execute arbitrary code, potentially leading to takeover of the mail service. This poses a risk to the confidentiality of correspondence and the integrity of the environment.
Recommendation
Promptly apply Microsoft-provided security updates and monitor for unusual activity on privileged accounts. Verify that network access to the service is appropriately restricted.
Other vulnerabilities in Microsoft Exchange Online
See all- CVE-2026-65801Critical
Server-side request forgery (SSRF) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-56191Critical
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network.
- CVE-2026-48582Critical
Missing authorization in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network.
- CVE-2026-48579Critical
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
- CVE-2026-54998High
A vulnerability in Microsoft Exchange Online allows an authorized attacker to elevate privileges over a network due to incorrect authorization.
Original NVD description (English source)
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS