PublicCVE

CVE-2026-62912

MEDIUM6.5Insecure deserialization

Description

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.

CVSS breakdown

CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
E
Unchanged
RL
O
RC
Changed

Affected products

Updated 29m ago · 8 sources