Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Feb 26, 2026
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2025-59249
Description
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
Affected products
4- Microsoft/Microsoft Exchange Server 2016 Cumulative Update 23v5Range: 15.01.0.0
- Microsoft/Microsoft Exchange Server 2019 Cumulative Update 14v5Range: 15.02.0.0
- Microsoft/Microsoft Exchange Server 2019 Cumulative Update 15v5Range: 15.02.0.0
- Microsoft/Microsoft Exchange Server Subscription Edition RTMv5Range: 15.02.0.0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- msrc.microsoft.com/update-guide/vulnerability/CVE-2025-59249mitrevendor-advisorypatch
News mentions
0No linked articles in our index yet.