Microsoft’s July 2026 security update fixes CVE-2026-55005, an 8.8-rated remote code execution vulnerability in on-premises Exchange Server caused by a heap-based buffer overflow. An attacker needs a valid low-privilege account, but can exploit the flaw over the network without user interaction...