Aller au contenu principal
HIGH

CVE-2025-53786

CVSS v3

8

HIGH

Score EPSS

7.7 %

probabilité d’exploitation au 2026-10-05

CISA KEV

Non

exploitation connue

Exploitation

—

statut SSVC

Description

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.

Détails techniques

Publiée le
2025-08-06

Questions fréquentes

Qu’est-ce que CVE-2025-53786 ?

On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix. Microsoft made these changes in the general interest of improving the security of hybrid Exchange deployments. Following further investigation, Microsoft identified specific security implications tied to the guidance and configuration steps outlined in the April announcement. Microsoft is issuing CVE-2025-53786 to document a vulnerability that is addressed by taking the steps documented with the April 18th announcement. Microsoft strongly recommends reading the information, installing the April 2025 (or later) Hot Fix and implementing the changes in your Exchange Server and hybrid environment.

CVE-2025-53786 est-elle activement exploitée ?

Aucune exploitation active de CVE-2025-53786 n’est confirmée. Son score EPSS était de 7.7 % au 2026-10-05, soit la probabilité estimée d’exploitation dans les 30 prochains jours.

Quel est le score CVSS de CVE-2025-53786 ?

CVE-2025-53786 a un score de base CVSS v3 de 8 (gravité HIGH).

CVE-2025-53786 touche-t-elle votre environnement ?

Utilisez isMalicious pour vérifier si l’une de vos IP ou l’un de vos domaines est associé aux IOC de cette vulnérabilité.

Vérifier une IPRechercher des CVEIntégrations SIEM et TIP

Sans carte bancaire · 50 vérifications gratuites par mois · Clé API gratuite

Autres vulnérabilités 2025 à trier

Classées par probabilité d’exploitation (EPSS).

Retour à la base de CVE