Exploited vulnerabilitiesBriefPublic record
Microsoft Exchange hybrid privilege escalation (CVE-2025-53786)
Emergency Directive ED 25-02. Not exploited.
- Disclosed
What happened
- Emergency Directive ED 25-02. Not exploited. Listed for completeness.
Live scores
Live scores
CVE-2025-53786- EPSS
- 0.076
some chance of attack soon - VEDAS
- 0.960
strong exploit evidence - On CISA KEV
- Not listed
- Detection rule
- None yet
Sources
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.