CVE-2024-26198
HIGHDescription
Microsoft Exchange Server Remote Code Execution Vulnerability
Is your site exposed to CVE-2024-26198?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
| microsoft | exchange_server |
References
Frequently Asked Questions
What is CVE-2024-26198? +
How severe is CVE-2024-26198? +
What products are affected by CVE-2024-26198? +
How do I check if I'm vulnerable to CVE-2024-26198? +
Related Vulnerabilities
Ghostscript for Windows is vulnerable to local privilege escalation through PostScript resource file hijacking. Due to the application searching for …
Multiple local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app allows a local user to escalate their privileges …
Potential privilege escalation issue in Revenera InstallShield version 2023 R1 running a renamed Setup.exe on Windows. When a local administrator …
Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user to …
CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.28.4 and 1.29.2, CloudNativePG opened superuser …
In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious …