What’s Vulnerable › Products

Microsoft Exchange Server Subscription Edition vulnerabilities

40 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 42 published in the last 12 months.

Check whether your Microsoft Exchange Server Subscription Edition version is affected

Exploited Microsoft Exchange Server Subscription Edition vulnerabilities

• CVE-2026-42897 — Microsoft Exchange Server Cross-Site Scripting Vulnerability

Latest Microsoft Exchange Server Subscription Edition vulnerabilities

• CVE-2026-87696 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-87695 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-96940 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-69641 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.1)
• CVE-2026-69382 — Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.9)
• CVE-2026-69380 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.1)
• CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-69375 — Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5)
• CVE-2026-69361 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-69356 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
• CVE-2026-69355 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-55007 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-65813 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-62915 — Microsoft Exchange Server Security Feature Bypass Vulnerability (CVSS 6.5)
• CVE-2026-62914 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-62913 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-62912 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 6.5)
• CVE-2026-62911 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-62910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-55009 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-55008 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.6)
• CVE-2026-55006 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-55005 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-47631 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-45583 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)