Vulnerabilidades do Microsoft Exchange Server

CVE-2026-96940 Alta · 8.8 CWE-1390 02/10/2026

Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate...

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-62911 Alta · 8.0 CWE-294 11/08/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-55005 Alta · 8.8 CWE-122 14/07/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVE-2026-47631 Média · 5.4 CWE-79 09/06/2026

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-45583 Alta · 8.1 CWE-94 09/06/2026

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

CVE-2026-45504 Alta · 8.8 CWE-918 09/06/2026

Microsoft Exchange Server Elevation of Privilege Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2026-45503 Média · 6.5 CWE-918 09/06/2026

Microsoft Exchange Server Information Disclosure Vulnerability

Improper authorization in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

CVE-2026-45502 Média · 5.0 CWE-918 09/06/2026

Microsoft Exchange Server Information Disclosure Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.

CVE-2026-45501 Média · 6.1 CWE-79 09/06/2026

Microsoft Exchange Server Spoofing Vulnerability

Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

CVE-2026-45500 Média · 6.1 CWE-79 09/06/2026

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-42897 Média · 6.1 KEV Alta · 50 Exploit público CWE-79 14/05/2026

Microsoft Exchange Server Cross-Site Scripting Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-21527 Média · 6.5 CWE-345 10/02/2026

Microsoft Exchange Server Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-64667 Média · 5.3 CWE-451 09/12/2025

Microsoft Exchange Server Spoofing Vulnerability

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-64666 Alta · 7.5 CWE-20 09/12/2025

Microsoft Exchange Server Elevation of Privilege Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2025-59249 Alta · 8.8 CWE-1390 14/10/2025

Microsoft Exchange Server Elevation of Privilege Vulnerability

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVE-2025-59248 Alta · 7.5 CWE-20 14/10/2025

Microsoft Exchange Server Spoofing Vulnerability

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-53782 Alta · 7.8 CWE-303 14/10/2025

Microsoft Exchange Server Elevation of Privilege Vulnerability

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

CVE-2024-21410 Crítica · 9.8 KEV Alta · 68 Exploit público CWE-287 13/02/2024

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2023-21529 Alta · 8.8 KEV Alta · 66 Ransomware CWE-502 14/02/2023

Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-41080 Alta · 8.8 KEV Urgente · 72 Exploit público Ransomware 09/11/2022

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41040 Alta · 8.8 KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022

Microsoft Exchange Server Server-Side Request Forgery Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2022-41082 Alta · 8.0 KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-42321 Alta · 8.8 KEV Urgente · 84 Exploit público Ransomware 09/11/2021

Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-34523 Crítica · 9.0 KEV Urgente · 92 Exploit público Ransomware 14/07/2021

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVE-2021-34473 Crítica · 9.1 KEV Urgente · 99 Exploit público Ransomware CWE-918 14/07/2021

Microsoft Exchange Server Remote Code Execution Vulnerability