Vulnerabilidades do Microsoft Exchange Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Exchange Server: 54 registro(s), com versões afetadas e correções.cpe:2.3:a:microsoft:exchange_server
CVE-2026-45502
Média · 5.0
CWE-918 09/06/2026
Microsoft Exchange Server Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.
CVE-2026-45501
Média · 6.1
CWE-79 09/06/2026
Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-45500
Média · 6.1
CWE-79 09/06/2026
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-42897
Média · 6.1
KEV Alta · 50 Exploit público CWE-79 14/05/2026
Microsoft Exchange Server Cross-Site Scripting Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21527
Média · 6.5
CWE-345 10/02/2026
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64667
Média · 5.3
CWE-451 09/12/2025
Microsoft Exchange Server Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-64666
Alta · 7.5
CWE-20 09/12/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59249
Alta · 8.8
CWE-1390 14/10/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2025-59248
Alta · 7.5
CWE-20 14/10/2025
Microsoft Exchange Server Spoofing Vulnerability
Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2025-53782
Alta · 7.8
CWE-303 14/10/2025
Microsoft Exchange Server Elevation of Privilege Vulnerability
Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.
CVE-2024-21410
Crítica · 9.8
KEV Alta · 68 Exploit público CWE-287 13/02/2024
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21529
Alta · 8.8
KEV Alta · 66 Ransomware CWE-502 14/02/2023
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-41080
Alta · 8.8
KEV Urgente · 72 Exploit público Ransomware 09/11/2022
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41040
Alta · 8.8
KEV Urgente · 94 Exploit público Ransomware CWE-918 02/10/2022
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41082
Alta · 8.0
KEV Urgente · 94 Exploit público Ransomware CWE-502 02/10/2022
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42321
Alta · 8.8
KEV Urgente · 84 Exploit público Ransomware 09/11/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34523
Crítica · 9.0
KEV Urgente · 98 Exploit público Ransomware 14/07/2021
Microsoft Exchange Server Privilege Escalation Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34473
Crítica · 9.1
KEV Urgente · 100 Exploit público Ransomware CWE-918 14/07/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-33766
Alta · 7.3
KEV Alta · 69 Exploit público 14/07/2021
Microsoft Exchange Server Information Disclosure
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31196
Alta · 7.2
KEV Alta · 59 14/07/2021
Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-31207
Média · 6.6
KEV Urgente · 85 Exploit público Ransomware CWE-434 11/05/2021
Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2021-26857
Alta · 7.8
KEV Urgente · 82 Exploit público Ransomware CWE-502 02/03/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27065
Alta · 7.8
KEV Urgente · 99 Exploit público Ransomware CWE-22 02/03/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26858
Alta · 7.8
KEV Urgente · 79 Ransomware 02/03/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855
Crítica · 9.1
KEV Urgente · 100 Exploit público Ransomware CWE-918 02/03/2021
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability