M365 Change Tracker

← All changes · security · CVE-2026-48579

CVE-2026-48579CriticalMonitor

Microsoft Exchange Online Information Disclosure Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.1)

Information Disclosure · Critical · CVSS 9.1. Affects: Exchange Server.

CVSS 9.1EPSS 1.0%Security update published 2026-09-02Applies to On-premisesNVD

Affected: Exchange Server

Related changes

Change history

2026-09-02 · First captured by tracker

View at Microsoft →