CVE-2026-62911

HIGH8.0Publicada el 11 de agosto de 2026

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Puntuación CVSS8.0 / 10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Tipo de debilidad (CWE)CWE-294

Microsoft corrige 421 vulnerabilidades: se explota un zero-day en `afd.sys`

Microsoft parchea 421 vulnerabilidades el 11/08/2026, incluyendo un zero-day en afd.sys que eleva privilegios a SYSTEM.

This product uses the NVD API but is not endorsed or certified by the NVD.