PT-2026-87193 · Microsoft · Exchange Server+3
CVE-2026-55007
·
Published
2026-09-08
·
Updated
2026-09-10
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
🚨 On-prem Exchange has another “please patch immediately” moment: CVE-2026-55007 lets unauthenticated attackers execute code remotely. Double-free memory bugs: free once, panic twice.
https://t.co/0McWeFeyWd
#MicrosoftSecurity #Msrc #Cve202655007 https://t.co/4SZ9ynrPay
Fix
RCE
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Exchange Server
Exchange Server 2019 Cumulative Update 14
Exchange Server 2019 Cumulative Update 15
Exchange Server Subscription Edition Rtm