Microsoft Exchange Server vulnerabilities
219 known vulnerabilities affecting microsoft/exchange_server.
Total CVEs
219
CISA KEV
20
actively exploited
Public exploits
46
Exploited in wild
29
Severity breakdown
CRITICAL25HIGH89MEDIUM99LOW6
Vulnerabilities
Page 1 of 11
CVE-2021-34473P1CRITICALCVSS 9.8KEVPoCRansomwarev2013v2016+1 more2021-07-14
CVE-2021-34473 [CRITICAL] CWE-918 CVE-2021-34473: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2021-26855P1CRITICALCVSS 9.8KEVPoCRansomwarev2013v2016+1 more2021-03-03
CVE-2021-26855 [CRITICAL] CWE-918 CVE-2021-26855: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2021-34523P1CRITICALCVSS 9.8KEVPoCRansomwarev2013v2016+1 more2021-07-14
CVE-2021-34523 [CRITICAL] CVE-2021-34523: Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2022-41040P1HIGHCVSS 8.8KEVPoCRansomwarev2013v2016+1 more2022-10-03
CVE-2022-41040 [HIGH] CWE-918 CVE-2022-41040: Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2021-42321P1HIGHCVSS 8.8KEVPoCRansomwarev2016v20192021-11-10
CVE-2021-42321 [HIGH] CVE-2021-42321: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2020-0688P1HIGHCVSS 8.8KEVPoCRansomwarev2010v2013+2 more2020-02-11
CVE-2020-0688 [HIGH] CWE-287 CVE-2020-0688: A remote code execution vulnerability exists in Microsoft Exchange software when the software fails
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
nvd
CVE-2022-41082P1HIGHCVSS 8.0KEVPoCRansomwarev2013v2016+1 more2022-10-03
CVE-2022-41082 [HIGH] CWE-502 CVE-2022-41082: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2022-41080P1CRITICALCVSS 9.8KEVPoCRansomwarev2013v2016+1 more2022-11-09
CVE-2022-41080 [CRITICAL] CVE-2022-41080: Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
CVE-2021-27065P1HIGHCVSS 7.8KEVPoCRansomwarev2013v2016+1 more2021-03-03
CVE-2021-27065 [HIGH] CWE-22 CVE-2021-27065: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2021-26857P1HIGHCVSS 7.8KEVPoCRansomwarev2010v2013+2 more2021-03-03
CVE-2021-26857 [HIGH] CWE-502 CVE-2021-26857: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2021-26858P1HIGHCVSS 7.8KEVPoCRansomwarev2010v2013+2 more2021-03-03
CVE-2021-26858 [HIGH] CVE-2021-26858: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2021-31207P1MEDIUMCVSS 6.6KEVPoCRansomwarev2013v2016+1 more2021-05-11
CVE-2021-31207 [MEDIUM] CWE-434 CVE-2021-31207: Microsoft Exchange Server Security Feature Bypass Vulnerability
Microsoft Exchange Server Security Feature Bypass Vulnerability
nvd
CVE-2021-33766P1HIGHCVSS 7.5KEVPoCv2013v2016+1 more2021-07-14
CVE-2021-33766 [HIGH] CVE-2021-33766: Microsoft Exchange Server Information Disclosure Vulnerability
Microsoft Exchange Server Information Disclosure Vulnerability
nvd
CVE-2017-8540P1HIGHCVSS 7.8KEVPoCv2013v20162017-05-26
CVE-2017-8540 [HIGH] CVE-2017-8540: The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Mic
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, Microsoft Exchange Server 2013 and 2016, does not properly scan a specially cra
nvd
CVE-2020-17144P1HIGHCVSS 8.8KEVPoCv20102020-12-10
CVE-2020-17144 [HIGH] CWE-502 CVE-2020-17144: Microsoft Exchange Remote Code Execution Vulnerability
Microsoft Exchange Remote Code Execution Vulnerability
nvd
CVE-2018-8581P1HIGHCVSS 7.4KEVPoCRansomwarev2010v2013+2 more2018-11-14
CVE-2018-8581 [HIGH] CVE-2018-8581: An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
nvd
CVE-2021-31196P1HIGHCVSS 7.2KEVPoCv2013v2016+1 more2021-07-14
CVE-2021-31196 [HIGH] CVE-2021-31196: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2023-21529P1HIGHCVSS 8.8KEVRansomwarev2013v2016+1 more2023-02-14
CVE-2023-21529 [HIGH] CWE-502 CVE-2023-21529: Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
nvd
CVE-2026-42897P1MEDIUMCVSS 6.1KEVPoCv2016v2016-cumulative_update_1+37 more2026-05-14
CVE-2026-42897 [MEDIUM] CWE-79 CVE-2026-42897: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ex
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-21410P1CRITICALCVSS 9.8KEVv2016v20192024-02-13
CVE-2024-21410 [CRITICAL] CWE-287 CVE-2024-21410: Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft Exchange Server Elevation of Privilege Vulnerability
nvd
1 / 11Next →