| CVE Number | Vulnerability | Product | Severity | Date |
|---|---|---|---|---|
| CVE-2026-70571 | Microsoft Exchange Server Remote Code Execution Vulnerability | Microsoft Exchange Server | Critical | 03-11-2026 |
Technical Information
An unauthenticated attacker could exploit a stack-based buffer overflow vulnerability by sending a specially crafted email that triggers the server’s internal content-conversion process, enabling remote code execution on the affected server without user interaction.
Patch release date: Oct 13, 2026
Further information on this vulnerability is available at : CVE-2026-70571
Affected Software
Microsoft Exchange Server 2019 Cumulative Update 15,Microsoft Exchange Server Subscription Edition RTM,
Microsoft Exchange Server 2016 Cumulative Update 23,
Microsoft Exchange Server 2019 Cumulative Update 14