All vulnerabilities

Servers and applications

CVE-2025-53786

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April…

Severity
High 8.0
Published
6 Aug 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.02.2562.017
Sources
NVD

Affected software

SoftwareAffected versions
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server
  • Version 2016-cumulative_update_23
  • Version 2019-cumulative_update_14
  • Version 2019-cumulative_update_15
Microsoft Exchange ServerServers and applications · cpe:a:microsoft:exchange_server_subscription_edition
  • Every version before 15.02.2562.017

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2025-53786
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2025-53786