# CVE-2026-96185: Microsoft Exchange Online stack-based buffer overflow

Source: https://junglewise.ai/threats/cve-2026-96185-stack-based-buffer-overflow-in-microsoft-exchange-online-allows  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-22. Updated: 2026-10-22  
License: CC BY 4.0 with a link back

CVE-2026-96185 · Severity: high · CVSS 7.5 · Published 2026-10-22

Microsoft Exchange Online, an email and collaboration platform used by organizations worldwide, contains a stack-based buffer overflow vulnerability that allows an authenticated attacker to execute arbitrary code. An attacker with valid credentials could exploit this to gain unauthorized control over email systems and access sensitive communications.

Technologies: [Microsoft Exchange Online](https://junglewise.ai/threats/technologies/exchange-online). Vendors: [Microsoft](https://junglewise.ai/threats/vendors/microsoft).

## Quick answers

**Is CVE-2026-96185 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-96185 being exploited in the wild.

**How severe is CVE-2026-96185?** High severity, with a CVSS score of 7.5, published 22 October 2026.

**Which products and versions are affected?** Microsoft Exchange Online.

**Is there a fix for CVE-2026-96185?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-96185 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-96185?** Check whether you run Microsoft Exchange Online. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow in Microsoft Exchange Online permits remote code execution when exploited by an authenticated attacker over the network. The vulnerability requires valid credentials to access the service, limiting exposure but allowing a compromised account or insider threat to establish code execution. The advisory indicates this has not yet been exploited in the wild as of the publication date.

## Affected products

- Microsoft Exchange Online

## Timeline

- 2026-10-22: disclosed

## References

- [https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96185](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-96185)

## Related threats

- [Microsoft Exchange Online server-side request forgery](https://junglewise.ai/threats/cve-2026-65801-microsoft-exchange-online-server-side-request-forgery)
- [Microsoft Exchange Online improper authentication](https://junglewise.ai/threats/cve-2026-56191-microsoft-exchange-online-improper-authentication)
- [Microsoft Exchange Online privilege escalation via incorrect authorization](https://junglewise.ai/threats/cve-2026-54998-microsoft-exchange-online-privilege-escalation-via-incorrect)
- [Microsoft Exchange Online privilege escalation via missing authorization](https://junglewise.ai/threats/cve-2026-48582-microsoft-exchange-online-privilege-escalation-via-missing)
- [Microsoft Exchange Online improper authorization](https://junglewise.ai/threats/cve-2026-48579-microsoft-exchange-online-improper-authorization)