Vulnerability intelligence

CVE-2026-55007

Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 CWE-415

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVSS Score

8.1

High

EPSS — Exploit Probability

0.7%

Riskier than 53% of all CVEs · checked 2026-10-23

Exploitation

Not in CISA KEV

KEV does not include every exploited vulnerability

Remediation

Patch available

Vendor fix published

NVD entry Vendor patch PoC / advisory

3 articles across 3 outlets · first covered Sep 8, 2026 · latest Sep 9, 2026

Coverage timeline

Microsoft Fixes Nearly 1,000 Flaws in Record Patch Tuesday Update
securityaffairs.com · Sep 9, 2026
Microsoft’s Record 972-Flaw Patch Haul Includes Two Zero-Days
arstechnica.com · Sep 8, 2026
Microsoft Fixes 974 Flaws in Record Patch Tuesday Update
www.securityweek.com · Sep 8, 2026

Related CVEs — Microsoft

CVE-2022-21894 CVE-2026-21509KEV CVE-2026-96951KEV CVE-2026-102866 CVE-2026-65674 CVE-2026-108398 CVE-2023-36880 CVE-2026-83498