Microsoft Exchange Server Elevation of Privilege Vulnerability
Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely CVE-2026-118154 · score 8.8/10
What could go wrong?
Someone who already has a normal account could give themselves full admin rights.
How urgent is it?
Check Microsoft’s page for details.
Who is affected?
Microsoft Exchange Server Subscription Edition RTM
What should I do?
Install this month’s updates via Windows Update, Intune or your update tool, then restart.
Known problems
Microsoft lists known issues per update: KB5133453. Official page.