Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-48579 1 Microsoft 1 Exchange Online 2026-06-05 9.1 Critical
Improper authorization in Microsoft Exchange Online allows an unauthorized attacker to disclose information over a network.
CVE-2026-26137 1 Microsoft 3 365 Copilot Business Chat, 365 Copilot Chat, Exchange Online 2026-04-14 9.9 Critical
Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.