ES
Email
Exchange Server
On CISA KEVExploited in the wildRansomware-linked
258
CVEs
20
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 23High 92Medium 66Low 0
Watch
Add Exchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21410 In wildKEV | 9.8 | Feb 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2021-34473 RansomwareIn wildKEV | 9.1 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26855 RansomwareIn wildKEV | 9.1 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2016; +18 more |
| CVE-2021-34523 RansomwareIn wildKEV | 9.0 | Jul 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2023-21709 | 9.8 | Aug 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +29 more |
| CVE-2021-28481 | 9.8 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-28480 | 9.8 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2019-1373 | 9.8 | Nov 12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution… Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2019-0586 | 9.8 | Jan 8 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2016; 2016; 2019 |
| CVE-2018-8302 | 9.8 | Aug 15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2010 Service Pack 3 Update Rollup 23; 2013 Cumulative Update 20; 2013 Cumulative Update 21; 2016 Cumulative Update 10; 2016 Cumulative Update 9 |
| CVE-2018-8154 | 9.8 | May 9 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption… Affected: 2010; 2013; 2013; 2013; 2016; 2016 |
| CVE-2026-55008 | 9.6 | Jul 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69356 | 9.3 | Sep 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69641 | 9.1 | Sep 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2021-27078 | 9.1 | Mar 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26412 | 9.1 | Mar 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17142 | 9.1 | Dec 10 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17132 | 9.1 | Dec 10 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21969 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21855 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-21846 | 9.0 | Jan 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-26427 | 9.0 | Oct 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-28483 | 9.0 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
Showing 23