M365 Change Tracker

← All changes · security · CVE-2026-54998

CVE-2026-54998CriticalMonitor

Microsoft Exchange Online Elevation of Privilege Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 8.8)

Elevation of Privilege · Critical · CVSS 8.8. Affects: Exchange Server.

CVSS 8.8EPSS 0.6%Security update published 2026-08-21Applies to On-premisesNVD

Affected: Exchange Server

Related changes

View at Microsoft →