ES
Product
Exchange Server Subscription Edition
On CISA KEVExploited in the wild
42
CVEs
1
On KEV
9.6
Max CVSS
3
New 30D
Severity mix
Critical 3High 22Medium 17Low 0
Watch
Add Exchange Server Subscription Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-96940 | 8.8 | Oct 2 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.053 |
| CVE-2026-69355 | 8.8 | Sep 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-65813 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-62913 | 8.8 | Aug 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-62910 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-55005 | 8.8 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: before 15.02.2562.045 |
| CVE-2026-45504 | 8.8 | Jun 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.043 |
| CVE-2025-59249 | 8.8 | Oct 14 | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network Affected: before 15.02.2562.029 |
| CVE-2026-69380 | 8.1 | Sep 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-55007 | 8.1 | Sep 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-45583 | 8.1 | Jun 9 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: before 15.02.2562.043 |
| CVE-2026-62911 | 8.0 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.046 |
| CVE-2025-53786 | 8.0 | Aug 6 | On April 18th 2025, Microsoft announced Exchange Server Security Changes for Hybrid Deployments and accompanying non-security Hot Fix Affected: before 15.02.2562.017 |
| CVE-2026-87695 | 7.8 | Oct 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.056 |
| CVE-2026-55009 | 7.8 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.045 |
| CVE-2026-55006 | 7.8 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.045 |
| CVE-2025-53782 | 7.8 | Oct 14 | Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally Affected: before 15.02.2562.029 |
| CVE-2026-87696 | 7.5 | Oct 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: before 15.02.2562.056 |
| CVE-2026-69378 | 7.5 | Sep 8 | Microsoft Exchange Server Denial of Service Vulnerability Affected: before 15.02.2562.049 |
| CVE-2025-64666 | 7.5 | Dec 9 | Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network Affected: before 15.02.2562.035 |
| CVE-2025-59248 | 7.5 | Oct 14 | Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network Affected: before 15.02.2562.029 |
| CVE-2025-33051 | 7.5 | Aug 12 | Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network Affected: before 15.02.2562.020 |
Showing 22