October Windows Server updates break Exchange sign-in and mail flow
A new 512-call Endpoint Mapper limit can stall OWA and delivery; Microsoft offers a registry workaround, not an uninstall.
68
Product
Exchange Server
- Mentions · 7d0
- Mentions · 30d10
- All mentions21
- First seenAug 17, 2026
- Last mentioned11d ago
Timeline
21 articles · newest firstMicrosoft VSS: Still Essential, But Not the Whole Story
Huntress details Microsoft VSS limits, including a 64TB cap and ransomware deletion of local snapshots.
32
Microsoft Patch Tuesday Sets New Record with 1,415 CVEs in October 2026 Updates
Microsoft's October 2026 updates fix 1,415 CVEs, including an exploited Windows Shell zero-day.
84
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days
Microsoft's October 2026 Patch Tuesday fixes 1,413 flaws, including an exploited Windows Shell zero-day.
88
October Patch Tuesday roundup: Over 1,400 Microsoft holes to be plugged, including three zero days
Microsoft's October Patch Tuesday fixes 1,407 CVEs, including an exploited Windows Shell Mark-of-the-Web bypass.
84
Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday
Microsoft's October 2026 Patch Tuesday fixes 1,413 CVEs, including an exploited Windows Shell zero-day.
86
Week in review: FortiBleed is still active, Patch Tuesday forecast
CISA added an exploited NetScaler flaw to KEV as Atlassian, Exchange, and SonicWall patches landed amid active attacks.
76
CVE-2026-96940: Microsoft Fixes Exchange Server Flaw For Which Exploitation Is More Likely
Microsoft patched CVE-2026-96940, which lets authenticated attackers read other Exchange mailboxes in the same organization.
76
Out-of-band Exchange Server update fixes high-severity mailbox access bug (CVE-2026-96940)
Microsoft issued an out-of-band Exchange update for CVE-2026-96940, a same-organization mailbox read flaw.
66
Microsoft Pushes New Exchange V2 Update After Discovering New Security Flaw
Microsoft reissued September 2026 Exchange updates to fix CVE-2026-96940, an authenticated mailbox-access flaw scored 8.8.
67
Microsoft Patch Tuesday, September 2026 Security Update Review
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.
74
September 2026 Patch Tuesday forecast: All we need is more time
September 2026 Patch Tuesday forecast expects record CVE volume after August's 398 fixes, with SharePoint flaws CVE-2026-55040 and CVE-2026-63520 actively exploited.
45
Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs
Microsoft's record September 2026 Patch Tuesday fixes 974 CVEs, including two exploited Windows privilege-escalation zero-days and 20 wormable bugs.
88
Microsoft breaks Patch Tuesday record with 974-CVE deluge
Microsoft's record 974-CVE Patch Tuesday ships two exploited Windows zero-days, while Adobe's StyleSmuggler zero-day (CVE-2026-75650) gives unauthenticated RCE in Magento.
90
Patch Tuesday - September 2026
Microsoft's September 2026 Patch Tuesday fixes 999 CVEs, a record, with two zero-day privilege escalation flaws already exploited in the wild.
88
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft's September 2026 Patch Tuesday fixes a record 974 CVEs, including two Windows zero-days exploited in the wild for privilege escalation.
85
Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1
Canada's Cyber Centre relays Microsoft's September 2026 rollup; CISA added exploited zero-days CVE-2026-85880 and CVE-2026-81963 to KEV.
65
Microsoft Patch Tuesday Update September 2026 – 974 Vulnerabilities Fixed, Including 2 Zero-Days
Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities across Windows and Office, including two actively exploited Windows privilege-escalation zero-days.
88
Microsoft Exchange Vulnerability CVE-2026-62911: What Administrators Should Do and How Zscaler Can Help
High-severity authentication bypass CVE-2026-62911 in Exchange Server has public exploit code; about 22,000 servers remain unpatched and internet-exposed.
78
August 2026 Patch Tuesday forecast: How do we deal with the patch apocalypse?
August 2026 Patch Tuesday forecast urges risk-based triage as AI inflates CVE volume, flags actively exploited SharePoint RCE CVE-2026-50522 and LegacyHive Windows flaw.
40
Persistent Attempts at Cyberespionage Against Southeast Asian Government Target Have Links to Alloy Taurus
Alloy Taurus (GALLIUM) compromised Southeast Asian government networks from 2022 to 2023 using Exchange web shells and undocumented .NET backdoors Reshell and Zapoa.
70
Related CVEs
by mentions- CVE-2026-85880<1%7.8Heap-Based Buffer Overflow in Windows ALPC Enables Local Privilege Escalation
- CVE-2026-81963<1%7.8Local Privilege Escalation via Link Following in Windows Update Stack
- CVE-2026-969403%8.8Weak authorization privilege escalation in Microsoft Exchange Server
- CVE-2026-9695110%8.8Windows Shell command injection bypasses a security feature
- CVE-2026-850462%8.8Actively Exploited V8 Type Confusion in Google Chrome (CVE-2026-85046)
- CVE-2026-55007<1%8.1Double Free Enables Unauthenticated RCE in Microsoft Exchange Server
- CVE-2026-62911<1%8.0Capture-Replay Authentication Bypass in Microsoft Exchange Server
- CVE-2026-2158999%9.3Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
- CVE-2026-697301%9.8Use-After-Free RCE in Windows DNS Server
- CVE-2026-81959<1%7.8Heap Buffer Overflow in Microsoft Excel Allows Local Code Execution (CVE-2026-81959)
Appears with
- Microsoftvendor · 21
- Windowsproduct · 11
- Microsoftorganization · 10
- SQL Serverproduct · 7
- SharePointproduct · 7
- Azureproduct · 6
- CISAorganization · 6
- Microsoft Officeproduct · 5
- Adobevendor · 3
- Exchange Onlineproduct · 3
- Zero Day Initiativeorganization · 3
- Windows Shellproduct · 3
- Googlevendor · 3
- Rapid7vendor · 2
- Microsoft Defenderproduct · 2
- Officeproduct · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.