Vulnerabilities
Microsoft Exchange Improper Authorization Privilege Escalation (CVE‑2026‑62911) – Immediate Patch Required
A remote privilege‑escalation flaw in Microsoft Exchange Server (CVE‑2026‑62911) allows authenticated attackers to bypass authorization and gain SYSTEM rights. The vulnerability is CVSS 8.8 and is already patched by Microsoft. Defenders must apply the update, verify session handling, and monitor for suspicious elevation attempts.
What happened
Microsoft Exchange Server suffered an improper authorization flaw (CVE‑2026‑62911) that lets an authenticated attacker bypass session checks and elevate privileges to SYSTEM. The bug resides in the handling of authorization requests and can be triggered remotely.
Impact
Exploiting the flaw grants full control over the Exchange host, enabling arbitrary code execution, data exfiltration, and lateral movement. CVSS score is 8.8 (High). Affected installations include all Exchange Server versions released before the Microsoft patch.
Mitigation
Apply the Microsoft security update released on 2026‑08‑11. Verify that the patch is installed by checking the Exchange Server version or the presence of the hotfix. As a precaution, disable the legacy authentication protocols that the vulnerability targets and monitor event logs for unusual elevation attempts.
Timeline
Reported to Microsoft: 2026‑05‑21
Public advisory released: 2026‑08‑11
Related vulnerabilities
Windows MIDI Service Local Privilege Escalation (CVE‑2026‑66804) – Patch Required
A local privilege escalation flaw in the Windows MIDI Service allows attackers with low‑privileged code execution to gain SYSTEM rights. Microsoft has released a patch; defenders should apply it immediately and verify service permissions. The CVSS score is 7.8.
Read briefing
CVE-2026-70104: Windows Win32k Privilege Escalation Vulnerability
A local privilege escalation flaw in the Windows Win32 kernel subsystem allows an authenticated user to gain elevated rights by dereferencing an untrusted pointer. Microsoft has issued a patch; defenders should update systems immediately and verify that the kernel component is patched.
Read briefing
CVE‑2026‑50332: Windows Kernel Elevation of Privilege Vulnerability – Immediate Update Required
Microsoft has identified CVE‑2026‑50332, a kernel‑level elevation of privilege flaw affecting Windows systems. The vulnerability allows local attackers to gain higher privileges. Defenders should verify patch status and apply the latest cumulative update.
Read briefing
Microsoft Office SharePoint Elevation of Privilege Vulnerability (CVE-2026-96044) – Immediate Patch Required
Microsoft Office SharePoint is affected by CVE-2026-96044, an elevation of privilege flaw that can allow local users to gain higher privileges. Microsoft has released a patch. Defenders should apply the update immediately, verify patch status, and monitor for suspicious activity.
Read briefing