CVE-2026-42897 - Vulnerability Details

Related Threat Clusters

• Microsoft Patches Critical Exchange Server Zero-Day Vulnerability CVE-2026-42897

  Microsoft has patched a high-severity zero-day vulnerability in Exchange Server, tracked as CVE-2026-42897, which allows attackers to execute arbitrary JavaScript via crafted emails in Outlook Web Access. The flaw…

  27 articles · Updated June 11, 2026
• Microsoft June 2026 Patch Tuesday: Record 206 Vulnerabilities Addressed

  On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…

  57 articles · Updated June 9, 2026
• Active Exploitation of CVE-2026-42897 in Microsoft Exchange Server

  Microsoft has disclosed a critical vulnerability, CVE-2026-42897, affecting on-premises Exchange Server versions 2016, 2019, and Subscription Edition. This zero-day flaw allows attackers to execute arbitrary JavaScript…

  39 articles · Updated May 15, 2026

Recent Intelligence Reports

• Microsoft patches actively exploited Exchange Server XSS vulnerability — Feeds.4Sysops · June 11, 2026
• Microsoft Patch Tuesday June 2026: Record 208 CVEs, Wormable Kernel Flaw Demands Patching — Techtimes · June 10, 2026
• June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’ — Csoonline · June 10, 2026
• Microsoft patches Exchange Server zero — Bleepingcomputer · June 10, 2026
• Microsoft June 2026 Patch Tuesday fixes 5 zero-days, 200 flaws — Bleepingcomputer · June 9, 2026
• Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws — Bleepingcomputer · June 9, 2026
• Microsoft warns of active exploitation of new Exchange Server zero-day vulnerability — Scworld · May 15, 2026
• Microsoft Exchange: Zero-day vulnerability is being attacked — Heise.De · May 15, 2026

Related Entities