ES
Email
Exchange Server
On CISA KEVExploited in the wildRansomware-linked
258
CVEs
20
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 23High 92Medium 66Low 0
Watch
Add Exchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-36035 | 8.0 | Nov 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36778 | 8.0 | Oct 10 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36757 | 8.0 | Sep 12 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36756 | 8.0 | Sep 12 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36745 | 8.0 | Sep 12 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36744 | 8.0 | Sep 12 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-38182 | 8.0 | Aug 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-35388 | 8.0 | Aug 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-28310 | 8.0 | Jun 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-21762 | 8.0 | Jan 10 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2013; 2016; 2019; 2019 |
| CVE-2023-21745 | 8.0 | Jan 10 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2022-41079 | 8.0 | Nov 9 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-41078 | 8.0 | Nov 9 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-24516 | 8.0 | Aug 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-24477 | 8.0 | Aug 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21980 | 8.0 | Aug 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-41348 | 8.0 | Oct 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2021-34470 | 8.0 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2019 |
| CVE-2021-33768 | 8.0 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2026-87695 | 7.8 | Oct 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-55009 | 7.8 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-55006 | 7.8 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2025-53782 | 7.8 | Oct 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2023-21764 | 7.8 | Jan 10 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-21763 | 7.8 | Jan 10 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2022-41123 | 7.8 | Nov 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2021-31198 | 7.8 | May 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2018-8265 | 7.8 | Oct 10 | A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution… Affected: 2013; 2016 |
| CVE-2021-31206 | 7.6 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2026-87696 | 7.5 | Oct 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69378 | 7.5 | Sep 8 | Microsoft Exchange Server Denial of Service Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2025-64666 | 7.5 | Dec 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2025-59248 | 7.5 | Oct 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2025-33051 | 7.5 | Aug 12 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2024-49040 | 7.5 | Nov 12 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +30 more |
| CVE-2023-21761 | 7.5 | Jan 10 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2021-34453 | 7.5 | Oct 13 | Microsoft Exchange Server Denial of Service Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2019-1233 | 7.5 | Sep 11 | A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Denial of… Affected: 2016; 2016; 2019; 2019 |
| CVE-2019-0686 | 7.4 | Mar 5 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability' Affected: 2010; 2013; 2016; 2019 |
| CVE-2016-3378 | 7.4 | Sep 14 | Open redirect vulnerability in Microsoft Exchange Server 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2… Affected: 2013; 2013; 2013; 2016; 2016 |
| CVE-2023-21710 | 7.2 | Feb 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2020-16969 | 7.1 | Oct 16 | <p>An information disclosure vulnerability exists in how Microsoft Exchange validates tokens when handling certain messages Affected: 2013; 2016; 2016; 2019; 2019 |