CVE-2025-53782

HIGH

Microsoft Exchange Server - Privilege Escalation

Title source: llm
STIX 2.1

Description

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

References (1)

Scores

CVSS v3 8.4
EPSS 0.0006
EPSS Percentile 20.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-303
Status published
Products (3)
microsoft/exchange_server 2016 (23 CPE variants)
microsoft/exchange_server 2019 (14 CPE variants)
microsoft/exchange_server < 15.02.2562.029
Published Oct 14, 2025
Tracked Since Feb 18, 2026