First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2026-87695

HighCVSS 7.8/10Last modified Oct 27, 2026

Description

Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
Microsoft	Microsoft Exchange Server 2016 Cumulative Update 23	>= 15.01.0.0, < 15.01.2507.077
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 14	>= 15.02.0.0, < 15.02.1544.050
Microsoft	Microsoft Exchange Server 2019 Cumulative Update 15	>= 15.02.0.0, < 15.02.1748.055
Microsoft	Microsoft Exchange Server Subscription Edition RTM	>= 15.02.0.0, < 15.02.2562.056

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-87695Patch, Vendor Advisory

Timeline

Published: Oct 13, 2026
Last modified: Oct 27, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-876967.5Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a net CVE-2026-876978.8Deserialization of untrusted data in .NET allows an unauthorized attacker to execute code over a network.CVE-2026-876985.5Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally.CVE-2026-876997.8Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally.CVE-2026-87703.3A vulnerability was identified in continuedev continue up to 1.2.22. This affects the function lsTool of the file core/tools/implementations CVE-2026-877007.8Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-877019.6Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized a CVE-2026-877027.8Integer overflow or wraparound in Windows Resource Management (MRM) allows an authorized attacker to elevate privileges locally.CVE-2026-877047.0Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.CVE-2026-877057.4Improper verification of source of a communication channel in Windows Hyper-V allows an unauthorized attacker to bypass a security feature o CVE-2026-877067.8Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized attacker to elevate privileges locally.CVE-2026-877077.8Heap-based buffer overflow in Windows Fax and Scan Service allows an authorized attacker to elevate privileges locally.

CVE-2026-87695: High severity, CVSS 7.8 | Vulnix