HIGH Published October 13, 2026

CVE-2026-87692

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

CVSS base score

7.8 (v3.1)

Severity

HIGH

Attack vector

Local

Weakness

CWE-502

Last modified

October 29, 2026

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

microsoft exchange server microsoft exchange server subscription edition

View full NVD advisory →

← Back to CVE watch