CVE-2026-70279

Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

References

• www.cve.org/CVERecord ↗
• nvd.nist.gov/vuln/detail/CVE-2026-70279 ↗
• msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70279 ↗

Related CVEs

• CVE-2026-83517Microsoft / Windows 10 Version 1607 · +20CVSS 9.8
• CVE-2026-75120OpenText / Endpoint Investigator · +3CVSS 9.3
• CVE-2026-70300Microsoft / Microsoft 365 Apps for Enterprise · +2CVSS 9.8
• CVE-2026-70291Microsoft / Microsoft 365 Apps for Enterprise · +5CVSS 9.8
• CVE-2026-70242Microsoft / Microsoft 365 Apps for Enterprise · +2CVSS 9.8
• CVE-2026-70188Microsoft / ASP.NET Core 10.0 · +5CVSS 9.1
• CVE-2026-70157Microsoft / Windows 10 Version 1607 · +20CVSS 9.8
• CVE-2026-70153Microsoft / Windows 10 Version 1607 · +20CVSS 9.8