CVE-2026-87695
Full vulnerability record from the local CVENow database.
Description
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
Severity
HIGH
CVSS score
7.8
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2026-10-13 19:21:22.153000
Last modified
2026-10-27 17:02:06.013000
View original CVE JSON
{
"id": "CVE-2026-87695",
"sourceIdentifier": "[email protected]",
"published": "2026-10-13T19:21:22.153",
"lastModified": "2026-10-27T17:02:06.013",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2016 Cumulative Update 23",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.01.0.0",
"lessThan": "15.01.2507.077",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 14",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0.0",
"lessThan": "15.02.1544.050",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server 2019 Cumulative Update 15",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0.0",
"lessThan": "15.02.1748.055",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "Microsoft",
"product": "Microsoft Exchange Server Subscription Edition RTM",
"platforms": [
"x64-based Systems"
],
"versions": [
{
"version": "15.02.0.0",
"lessThan": "15.02.2562.056",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"attackVector": "LOCAL",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 1.8,
"impactScore": 5.9
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-10-09T00:00:00+00:00",
"id": "CVE-2026-87695",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-829"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_23:*:*:*:*:*:*",
"matchCriteriaId": "FF76AEDA-E574-40ED-B64F-8FDEF8CAC802"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_14:*:*:*:*:*:*",
"matchCriteriaId": "8C98993B-82A5-48CC-947F-896CEA0CDB7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_15:*:*:*:*:*:*",
"matchCriteriaId": "7166BCE0-1D55-46B2-96B9-250AB4BB6291"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:microsoft:exchange_server_subscription_edition:*:*:*:*:*:*:*:*",
"versionEndExcluding": "15.02.2562.056",
"matchCriteriaId": "62080DAC-9593-428D-A797-C6E52D0A753D"
}
]
}
]
}
],
"references": [
{
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695",
"source": "[email protected]",
"tags": [
"Patch",
"Vendor Advisory"
]
}
]
}