ES
Product
Exchange Server Subscription Edition
On CISA KEVExploited in the wild
42
CVEs
1
On KEV
9.6
Max CVSS
3
New 30D
Severity mix
Critical 3High 22Medium 17Low 0
Watch
Add Exchange Server Subscription Edition to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42897 In wildKEV | 6.1 | May 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.043 |
| CVE-2026-69375 | 6.5 | Sep 8 | Microsoft Exchange Server Tampering Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-69361 | 6.5 | Sep 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-62915 | 6.5 | Aug 11 | Microsoft Exchange Server Security Feature Bypass Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-62912 | 6.5 | Aug 11 | Microsoft Exchange Server Denial of Service Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-45503 | 6.5 | Jun 9 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: before 15.02.2562.043 |
| CVE-2026-21527 | 6.5 | Feb 10 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.037 |
| CVE-2025-25005 | 6.5 | Aug 12 | Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network Affected: before 15.02.2562.020 |
| CVE-2026-45501 | 6.1 | Jun 9 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.043 |
| CVE-2026-45500 | 6.1 | Jun 9 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.043 |
| CVE-2026-69382 | 5.9 | Sep 8 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: before 15.02.2562.049 |
| CVE-2026-62914 | 5.4 | Aug 11 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.046 |
| CVE-2026-47631 | 5.4 | Jun 9 | Microsoft Exchange Server Spoofing Vulnerability Affected: before 15.02.2562.043 |
| CVE-2025-64667 | 5.3 | Dec 9 | User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network Affected: before 15.02.2562.035 |
| CVE-2025-25007 | 5.3 | Aug 12 | Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network Affected: before 15.02.2562.020 |
| CVE-2025-25006 | 5.3 | Aug 12 | Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network Affected: before 15.02.2562.020 |
| CVE-2026-45502 | 5.0 | Jun 9 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: before 15.02.2562.043 |
Showing 17