Known Vulnerabilities for Microsoft Server by Microsoft Corporation
Listed below are 10 of the newest known vulnerabilities associated with "Microsoft Server" by "Microsoft Corporation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-58278 json | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing ove... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-57993 json | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing ove... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-57987 json | Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing ove... | Not Provided | 2026-07-03 | 2026-07-06 |
| CVE-2026-57100 json | Server-side request forgery (ssrf) in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elev... | Not Provided | 2026-07-02 | 2026-07-07 |
| CVE-2026-55440 json | Microsoft UFO open-source framework for intelligent automation across devices and platforms. Prior to 3.0.7, the COMMAND_RESU... | Not Provided | 2026-07-16 | 2026-07-16 |
| CVE-2026-55051 json | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over ... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-55009 json | Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally. | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-55008 json | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an u... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-55006 json | Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges l... | Not Provided | 2026-07-14 | 2026-07-15 |
| CVE-2026-55005 json | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | Not Provided | 2026-07-14 | 2026-07-15 |