What’s Vulnerable › Products
Microsoft Exchange Server vulnerabilities
256 known vulnerabilities, 20 confirmed exploited in the wild (CISA KEV), 41 published in the last 12 months.
Check whether your Microsoft Exchange Server version is affected
Exploited Microsoft Exchange Server vulnerabilities
- CVE-2026-42897 — Microsoft Exchange Server Cross-Site Scripting Vulnerability
- CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
- CVE-2021-31196 — Microsoft Exchange Server Information Disclosure Vulnerability
- CVE-2024-21410 — Microsoft Exchange Server Privilege Escalation Vulnerability
- CVE-2022-41080 — Microsoft Exchange Server Privilege Escalation Vulnerability
- CVE-2022-41082 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2022-41040 — Microsoft Exchange Server Server-Side Request Forgery Vulnerability
- CVE-2018-8581 — Microsoft Exchange Server Privilege Escalation Vulnerability
- CVE-2017-8540 — Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability
- CVE-2021-33766 — Microsoft Exchange Server Information Disclosure
- CVE-2021-42321 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-34523 — Microsoft Exchange Server Privilege Escalation Vulnerability
- CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability
- CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2020-17144 — Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2020-0688 — Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability
Latest Microsoft Exchange Server vulnerabilities
- CVE-2026-96940 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-69641 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.1)
- CVE-2026-69382 — Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.9)
- CVE-2026-69380 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.1)
- CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5)
- CVE-2026-69375 — Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5)
- CVE-2026-69361 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5)
- CVE-2026-69356 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
- CVE-2026-69355 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-55007 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
- CVE-2026-65813 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-62915 — Microsoft Exchange Server Security Feature Bypass Vulnerability (CVSS 6.5)
- CVE-2026-62914 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
- CVE-2026-62913 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-62912 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 6.5)
- CVE-2026-62911 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.0)
- CVE-2026-62910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-55009 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
- CVE-2026-55008 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.6)
- CVE-2026-55006 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
- CVE-2026-55005 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
- CVE-2026-47631 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
- CVE-2026-45583 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
- CVE-2026-45504 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
- CVE-2026-45503 — Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 6.5)