Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

Microsoft Exchange Server: Local Privilege Escalation Risk

CVE-2025-53782 · published 1 year ago
Summary

An error in the way Microsoft Exchange Server handles authentication can let an unauthorized person take control of a local machine. This could happen if an attacker is already on the same network as the server. To stay safe, make sure to patch your Microsoft Exchange Server as soon as possible and consider implementing additional security measures to prevent unauthorized access.

What to do
  • Update microsoft exchange_server to version 15.02.2562.029 or later.
Affected software
VendorProductAffected versions
microsoft exchange_server < 15.02.2562.029
2016
2019
cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*
Original advisory text
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-303Incorrect Implementation of Authentication Algorithm
Timeline
Published14 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-53782 · NVD
Track software like this
Free during beta