CVE-2025-53782

Опубликовано: 14 окт. 2025

Источник: nvd

CVSS3: 8.4

CVSS3: 7.8

EPSS Низкий

Описание

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

Ссылки

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-53782
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:exchange_server:*:*:*:*:subscription:*:*:*

Версия до 15.02.2562.029 (исключая)

cpe:2.3:a:microsoft:exchange_server:2016:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_1:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_2:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_21:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_22:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_3:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_4:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_5:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_6:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_10:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_11:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_12:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_13:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*

cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*

EPSS

Процентиль: 15%

0.00048

Низкий

8.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-303

NVD-CWE-noinfo

Связанные уязвимости

CVE-2025-53782

CVSS3: 8.4

msrc

23 дня назад

Microsoft Exchange Server Elevation of Privilege Vulnerability

GHSA-2jpf-9r3f-f5p3

CVSS3: 8.4

github

23 дня назад

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

EPSS

Процентиль: 15%

0.00048

Низкий

8.4 High

CVSS3

7.8 High

CVSS3

Дефекты

CWE-303

NVD-CWE-noinfo