Microsoft Exchange Server Remote Code Execution Vulnerability
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Unlikely CVE-2026-118149 · score 8.8/10
What could go wrong?
An attacker could run their own programs on your computer from far away, without sitting at it.
How urgent is it?
Check Microsoft’s page for details.
Who is affected?
Microsoft Exchange Server Subscription Edition RTM
What should I do?
Install this month’s updates via Windows Update, Intune or your update tool, then restart.
Known problems
Microsoft lists known issues per update: KB5133453. Official page.