ES
Email
Exchange Server
On CISA KEVExploited in the wildRansomware-linked
258
CVEs
20
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 23High 92Medium 66Low 0
Watch
Add Exchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21410 In wildKEV | 9.8 | Feb 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2021-34473 RansomwareIn wildKEV | 9.1 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26855 RansomwareIn wildKEV | 9.1 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2016; +18 more |
| CVE-2021-34523 RansomwareIn wildKEV | 9.0 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2023-21529 RansomwareIn wildKEV | 8.8 | Feb 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019; 2019 |
| CVE-2022-41080 RansomwareIn wildKEV | 8.8 | Nov 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-41040 RansomwareIn wildKEV | 8.8 | Oct 3 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-42321 RansomwareIn wildKEV | 8.8 | Nov 10 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2020-0688 RansomwareIn wildKEV | 8.8 | Feb 11 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Affected: 2010; 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17144 In wildKEV | 8.4 | Dec 9 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2022-41082 RansomwareIn wildKEV | 8.0 | Oct 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-27065 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2013; 2016; 2016; +18 more |
| CVE-2021-26858 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2016; +18 more |
| CVE-2021-26857 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2013; 2013; 2016; +20 more |
| CVE-2017-8540 In wildKEV | 7.8 | May 26 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Affected: 2013; 2016 |
| CVE-2018-8581 RansomwareIn wildKEV | 7.4 | Nov 14 | Microsoft Exchange Server Privilege Escalation Vulnerability Affected: 2010; 2013; 2016; 2019 |
| CVE-2021-33766 In wildKEV | 7.3 | Jul 14 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-31196 In wildKEV | 7.2 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-31207 RansomwareIn wildKEV | 6.6 | May 11 | Microsoft Exchange Server Security Feature Bypass Vulnerability Affected: 15.01.0 before 15.01.2176.014 |
| CVE-2026-42897 In wildKEV | 6.1 | May 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +33 more |
| CVE-2023-21709 | 9.8 | Aug 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +29 more |
| CVE-2021-28481 | 9.8 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-28480 | 9.8 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2019-1373 | 9.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution… Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2019-0586 | 9.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2016; 2016; 2019 |
| CVE-2018-8302 | 9.8 | Aug 15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2010 Service Pack 3 Update Rollup 23; 2013 Cumulative Update 20; 2013 Cumulative Update 21; 2016 Cumulative Update 10; 2016 Cumulative Update 9 |
| CVE-2018-8154 | 9.8 | May 9 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2010; 2013; 2013; 2013; 2016; 2016 |
| CVE-2026-55008 | 9.6 | Jul 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69356 | 9.3 | Sep 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69641 | 9.1 | Sep 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2021-27078 | 9.1 | Mar 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26412 | 9.1 | Mar 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17142 | 9.1 | Dec 10 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17132 | 9.1 | Dec 10 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21969 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21855 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21846 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26427 | 9.0 | Oct 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-28483 | 9.0 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2026-96940 | 8.8 | Oct 2 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69355 | 8.8 | Sep 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-65813 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-62913 | 8.8 | Aug 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-62910 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-55005 | 8.8 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-45504 | 8.8 | Jun 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2025-59249 | 8.8 | Oct 14 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2024-26198 | 8.8 | Mar 12 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2023-38185 | 8.8 | Aug 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-38181 | 8.8 | Aug 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |