Microsoft Exchange Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Exchange Server: 54 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:exchange_server
CVE-2026-45502
Medium · 5.0
CWE-918 Jun 9, 2026
Microsoft Exchange Server Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
CVE-2026-45501
Medium · 6.1
CWE-79 Jun 9, 2026
Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-45500
Medium · 6.1
CWE-79 Jun 9, 2026
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42897
Medium · 6.1
KEV High · 50 Public exploit CWE-79 May 14, 2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21527
Medium · 6.5
CWE-345 Feb 10, 2026
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64667
Medium · 5.3
CWE-451 Dec 9, 2025
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64666
High · 7.5
CWE-20 Dec 9, 2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59249
High · 8.8
CWE-1390 Oct 14, 2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59248
High · 7.5
CWE-20 Oct 14, 2025
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53782
High · 7.8
CWE-303 Oct 14, 2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
CVE-2024-21410
Critical · 9.8
KEV High · 68 Public exploit CWE-287 Feb 13, 2024
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21529
High · 8.8
KEV High · 66 Ransomware CWE-502 Feb 14, 2023
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41080
High · 8.8
KEV Urgent · 72 Public exploit Ransomware Nov 9, 2022
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41040
High · 8.8
KEV Urgent · 94 Public exploit Ransomware CWE-918 Oct 2, 2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082
High · 8.0
KEV Urgent · 94 Public exploit Ransomware CWE-502 Oct 2, 2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42321
High · 8.8
KEV Urgent · 84 Public exploit Ransomware Nov 9, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34523
Critical · 9.0
KEV Urgent · 98 Public exploit Ransomware Jul 14, 2021
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34473
Critical · 9.1
KEV Urgent · 100 Public exploit Ransomware CWE-918 Jul 14, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-33766
High · 7.3
KEV High · 69 Public exploit Jul 14, 2021
Microsoft Exchange Server Information Disclosure
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31196
High · 7.2
KEV High · 59 Jul 14, 2021
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31207
Medium · 6.6
KEV Urgent · 85 Public exploit Ransomware CWE-434 May 11, 2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2021-26857
High · 7.8
KEV Urgent · 82 Public exploit Ransomware CWE-502 Mar 2, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27065
High · 7.8
KEV Urgent · 99 Public exploit Ransomware CWE-22 Mar 2, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858
High · 7.8
KEV Urgent · 79 Ransomware Mar 2, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855
Critical · 9.1
KEV Urgent · 100 Public exploit Ransomware CWE-918 Mar 2, 2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability