What’s Vulnerable › Products

Microsoft Exchange Server Subscription Edition RTM vulnerabilities

46 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 46 published in the last 12 months.

Check whether your Microsoft Exchange Server Subscription Edition RTM version is affected

Exploited Microsoft Exchange Server Subscription Edition RTM vulnerabilities

• CVE-2026-42897 — Microsoft Exchange Server Spoofing Vulnerability

Latest Microsoft Exchange Server Subscription Edition RTM vulnerabilities

• CVE-2026-87696 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.5)
• CVE-2026-87695 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-87692 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-77910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-70571 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-70279 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
• CVE-2026-96940 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-69641 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 9.1)
• CVE-2026-69382 — Microsoft Exchange Server Information Disclosure Vulnerability (CVSS 5.9)
• CVE-2026-69380 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.1)
• CVE-2026-69378 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 7.5)
• CVE-2026-69375 — Microsoft Exchange Server Tampering Vulnerability (CVSS 6.5)
• CVE-2026-69361 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 6.5)
• CVE-2026-69356 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.3)
• CVE-2026-69355 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-55007 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.1)
• CVE-2026-62911 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.0)
• CVE-2026-65813 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-62915 — Microsoft Exchange Server Security Feature Bypass Vulnerability (CVSS 6.5)
• CVE-2026-62914 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 5.4)
• CVE-2026-62913 — Microsoft Exchange Server Remote Code Execution Vulnerability (CVSS 8.8)
• CVE-2026-62912 — Microsoft Exchange Server Denial of Service Vulnerability (CVSS 6.5)
• CVE-2026-62910 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 8.8)
• CVE-2026-55009 — Microsoft Exchange Server Elevation of Privilege Vulnerability (CVSS 7.8)
• CVE-2026-55008 — Microsoft Exchange Server Spoofing Vulnerability (CVSS 9.6)