What’s Vulnerable › Products

Microsoft Exchange Server vulnerabilities

45 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 45 published in the last 12 months.

Check whether your Microsoft Exchange Server version is affected

Exploited Microsoft Exchange Server vulnerabilities

• CVE-2026-42897 — Microsoft Exchange Server Spoofing Vulnerability

Latest Microsoft Exchange Server vulnerabilities

• CVE-2026-87696 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-87695 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-77910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-70571 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-70279 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
• CVE-2026-96940 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-69641 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.1)
• CVE-2026-69382 — Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.9)
• CVE-2026-69380 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.1)
• CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-69375 — Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5)
• CVE-2026-69361 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-69356 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
• CVE-2026-69355 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-55007 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-62911 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-65813 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-62915 — Microsoft Exchange Server Security Feature Bypass Vulnerability (CVSS 6.5)
• CVE-2026-62914 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-62913 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-62912 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 6.5)
• CVE-2026-62910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-55009 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-55008 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.6)
• CVE-2026-55006 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)