M365 Change Tracker

← All changes · security · CVE-2026-96185

CVE-2026-96185CriticalMonitor

Microsoft Exchange Online Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 7.5)

Remote Code Execution · Critical · CVSS 7.5. Affects: Exchange Server.

CVSS 7.5EPSS 0.5%Security update published 2026-11-10Applies to On-premisesNVD

Affected: Exchange Server

Related changes

Change history

2026-10-22 · First captured by tracker

View at Microsoft →