CVEDB API

Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 12.0%

CVSS Severity

CVSS v3 Score 7.8

References

Products affected by CVE-2026-55006

Microsoft » Exchange Server » Version: 2016

cpe:2.3:a:microsoft:exchange_server:2016
Microsoft » Exchange Server » Version: 2019

cpe:2.3:a:microsoft:exchange_server:2019
Microsoft » Exchange Server Subscription Edition » Version: N/A

cpe:2.3:a:microsoft:exchange_server_subscription_edition:-
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.017

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.017
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.020

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.020
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.027

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.027
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.029

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.029
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.035

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.035
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.037

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.037
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.041

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.041
Microsoft » Exchange Server Subscription Edition » Version: 15.02.2562.043

cpe:2.3:a:microsoft:exchange_server_subscription_edition:15.02.2562.043