TGViewer
Vulnerability Management and more Vulnerability Management and more @avleonovcom · 2.89K subscribers
Post #1668 585
July "In the Trend of VM" (#29): Microsoft Exchange Server vulnerability. Here is my traditional monthly roundup of trending vulnerabilities, according to Positive Technologies. The previous June edition featured four vulnerabilities. This time, there's only one.

🗞 Post on Habr (rus)
🗒 Digest on the PT website (rus)

🔻 XSS - Microsoft Exchange (CVE-2026-42897). The vulnerability allows attackers to execute arbitrary JavaScript in a user's browser when the user opens a malicious email in Outlook Web Access (OWA). A public proof-of-concept exploit is available, and the vulnerability has already been exploited in the wild.

🟥 The full list of trending vulnerabilities is available on the portal

@avleonovcom #PositiveTechnologies #TrendVulns #Microsoft #Exchange #Outlook #OWA #XSS #Spoofing #JavaScript #InternetExplorer #Edge #CISA #CISAKEV #KEV #exploit #GitHub #EM #EOMT #ESU
  • ❤ 2
  • 👍 1
Open in Telegram All posts from @avleonovcom
More from @avleonovcom
  1. Sep 14, 2026About Authentication Bypass - Microsoft SharePoint (CVE-2026-55040) vulnerability. SharePo…
  2. Sep 11, 2026About Elevation of Privilege - Windows Ancillary Function Driver for WinSock (CVE-2026-688…
  3. Sep 9, 2026September Microsoft Patch Tuesday. A total of 973 vulnerabilities were addressed - more th…
  4. Sep 7, 2026About Remote Code Execution - TeamCity (CVE-2026-63077) vulnerability. TeamCity is a propr…
  5. Sep 4, 2026About Remote Code Execution - TrueConf Server (CVE-2026-72529, CVE-2026-72530) vulnerabili…
  6. Aug 31, 2026About Remote Code Execution - Zimbra Collaboration (CVE-2026-73570) vulnerability. Zimbra…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →