CVE-2026-55007

Published Sep 8, 2026

Last updated a day ago

CVSS high 8.1
Zero-day

Overview

Description
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
Source
secure@microsoft.com
NVD status
Awaiting Analysis

Risk scores

CVSS 3.1

Type
Secondary
Base score
8.1
Impact score
5.9
Exploitability score
2.2
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
HIGH

Weaknesses

secure@microsoft.com
CWE-415

Social media

Hype score
Not currently trending

  1. マイクロソフトの定例更新。過去最高の脆弱性974件が修正。Windowsで723件、Officeで222件。ゼロデイはWindows ALPCのCVE-2026-85880とWindows Update StackのCVE-2026-81963。 https://t.co/vpzzxfM6ym 要注意なのはCVE-2026-55007（Exchange Server

    @__kokumoto

    8 Sept 2026

    983 Impressions

    2 Retweets

    2 Likes

    5 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Improper authentication in Microsoft Authenticator allows an unauthorized attacker to elevate privileges locally.•CVE-2026-80097
  2. Gitea Code Injection Vulnerability•CVE-2026-60004
  3. TrueConf Server Code Injection Vulnerability•CVE-2026-72530
  4. TrueConf Server Missing Authentication for Critical Function Vulnerability•CVE-2026-72529
  5. JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability•CVE-2026-66384

References

Sources include official advisories and independent security research.