M365 Change Tracker

← All changes · security · CVE-2026-48582

CVE-2026-48582CriticalMonitor

Microsoft Exchange Online Elevation of Privilege Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.6)

Elevation of Privilege · Critical · CVSS 9.6. Affects: Exchange Server.

CVSS 9.6EPSS 0.7%Security update published 2026-09-02Applies to On-premisesNVD

Affected: Exchange Server

Related changes

Change history

2026-09-02 · First captured by tracker

View at Microsoft →