Skip to content
pwned.coffee
Updated 40 min ago
Today's specials
Specials
13
Past orders
Past
The menu
Menu
Your usual
Usual
Delivery
Delivery
History
15 May 2026
1 new, 0 updated.
New that day
high
patched
exploited
15 May 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Microsoft Microsoft
Microsoft Exchange Server contains a cross-site scripting vulnerability during web page generation in Outlook Web Access and when certain interaction conditions are met, arbitrary JavaScript can be executed in the browser context. Added to CISA KEV on 2026-05-15 (federal deadline 2026-05-29).
CVE-2026-42897
3 sources