Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNewsAbout
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
5919 articles · 249482 vulns · 36/41 feeds (7d)
← Back to list
7.5
CVE-2026-96185PATCHED
microsoft · exchange online

Microsoft Exchange Online Remote Code Execution Vulnerability

Description

Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network.

Affected Products

VendorProductVersions
microsoftexchange online-

References

  • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96185(vendor-advisory, patch)

Related News (2 articles)

Tier C
VulDB1d ago
CVE-2026-96185 | Microsoft Exchange Server buffer overflow
→ No new info (linked only)
Tier A
Microsoft MSRC1d ago
CVE-2026-96185 Microsoft Exchange Online Remote Code Execution Vulnerability
→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.17.5 HIGH
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
CISA KEV❌ No
Actively exploited❌ No
Patch available
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96185
CWECWE-121
PublishedOct 22, 2026
Last enriched1d agov2
Trending Score39
Source articles2
Independent2
Info Completeness9/14
Missing: title, epss, kev, exploit, iocs

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Related CVEs (5)

HIGHCVE-2026-96951EXPKEV
Windows Shell Security Feature Bypass Vulnerability
Trending: 131
CRITICALCVE-2026-105014
Azure Pipelines Remote Code Execution Vulnerability
Trending: 50
CRITICALCVE-2026-110063
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Trending: 50
CRITICALCVE-2026-97785
AAD App Proxy Elevation of Privilege Vulnerability
Trending: 37
CRITICALCVE-2026-83938
Azure Kubernetes Configuration Service Elevation of Privilege Vulnerability
Trending: 37

Pin to Dashboard

Verification

State: verified
Confidence: 0%

Vulnerability Timeline

CVE Published
Oct 22, 2026
Discovered by ZDM
Oct 22, 2026
Updated: description, mitreAttack
Oct 22, 2026
Patch Available
Oct 23, 2026

Version History

v2
Last enriched 1d ago
v2Tier A1d ago

Added description detailing stack-based buffer overflow mechanism and added MITRE ATT&CK technique T1190 (Exploit Public-Facing Application).

descriptionmitreAttack
via Microsoft MSRC
v11d ago

Initial creation