All CVEs
Vulnerability intelligence

CVE-2026-55007

Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 CWE-415

Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVSS Score
8.1
High
EPSS — Exploit Probability
Awaiting FIRST.org data · checked 2026-09-08
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
NVD entry Vendor patch PoC / advisory

2 articles across 2 outlets · first covered Sep 8, 2026 · latest Sep 8, 2026

Coverage timeline

Related CVEs — Microsoft