{
 "version": "https://jsonfeed.org/version/1.1",
 "title": "Microsoft Exchange Server 2019 Cumulative Update 14: all CVE events",
 "home_page_url": "https://patchwire.jonathanross.dev/products/microsoft--microsoft-exchange-server-2019-cumulative-update-14/",
 "feed_url": "https://patchwire.jonathanross.dev/feeds/products/microsoft--microsoft-exchange-server-2019-cumulative-update-14/all.json",
 "authors": [
  {
   "name": "Patchwire"
  }
 ],
 "language": "en",
 "items": [
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-87696/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-87696/",
   "title": "CVE-2026-87696 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-87695/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-87695/",
   "title": "CVE-2026-87695 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-87692/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-87692/",
   "title": "CVE-2026-87692 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-77910/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-77910/",
   "title": "CVE-2026-77910 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70571/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70571/",
   "title": "CVE-2026-70571 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-70279/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-70279/",
   "title": "CVE-2026-70279 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.",
   "date_published": "2026-10-13T19:01:10Z"
  },
  {
   "id": "tag:patchwire.jonathanross.dev,2026:CVE-2026-96940/disclosed",
   "url": "https://patchwire.jonathanross.dev/cve/CVE-2026-96940/",
   "title": "CVE-2026-96940 · Microsoft Exchange Server 2016 Cumulative Update 23 · disclosed",
   "content_text": "Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.",
   "date_published": "2026-10-02T19:06:19Z"
  }
 ]
}