ES
Email
Exchange Server
On CISA KEVExploited in the wildRansomware-linked
258
CVEs
20
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 23High 92Medium 66Low 0
Watch
Add Exchange Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21529 RansomwareIn wildKEV | 8.8 | Feb 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019; 2019 |
| CVE-2022-41080 RansomwareIn wildKEV | 8.8 | Nov 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2022-41040 RansomwareIn wildKEV | 8.8 | Oct 3 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-42321 RansomwareIn wildKEV | 8.8 | Nov 10 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2020-0688 RansomwareIn wildKEV | 8.8 | Feb 11 | Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability Affected: 2010; 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17144 In wildKEV | 8.4 | Dec 9 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2010 |
| CVE-2022-41082 RansomwareIn wildKEV | 8.0 | Oct 3 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-27065 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2013; 2016; 2016; +18 more |
| CVE-2021-26858 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2013; 2013; 2016; 2016; 2016; +18 more |
| CVE-2021-26857 RansomwareIn wildKEV | 7.8 | Mar 2 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2010; 2013; 2013; 2013; 2013; 2016; +20 more |
| CVE-2017-8540 In wildKEV | 7.8 | May 26 | Microsoft Malware Protection Engine Improper Restriction of Operations Vulnerability Affected: 2013; 2016 |
| CVE-2018-8581 RansomwareIn wildKEV | 7.4 | Nov 14 | Microsoft Exchange Server Privilege Escalation Vulnerability Affected: 2010; 2013; 2016; 2019 |
| CVE-2021-33766 In wildKEV | 7.3 | Jul 14 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-31196 In wildKEV | 7.2 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2026-96940 | 8.8 | Oct 2 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-69355 | 8.8 | Sep 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-65813 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-62913 | 8.8 | Aug 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-62910 | 8.8 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2026-55005 | 8.8 | Jul 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-45504 | 8.8 | Jun 9 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2025-59249 | 8.8 | Oct 14 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2024-26198 | 8.8 | Mar 12 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2023-38185 | 8.8 | Aug 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-38181 | 8.8 | Aug 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-35368 | 8.8 | Aug 8 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-32031 | 8.8 | Jun 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-21707 | 8.8 | Feb 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019; 2019 |
| CVE-2023-21706 | 8.8 | Feb 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2019; 2019 |
| CVE-2022-23277 | 8.8 | Mar 9 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2021-28482 | 8.8 | Apr 13 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17143 | 8.8 | Dec 10 | Microsoft Exchange Server Information Disclosure Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2018-0986 | 8.8 | Apr 4 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka… Affected: 2013; 2016 |
| CVE-2018-16793 | 8.6 | Sep 21 | Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access)… Affected: 2010; 2010; 2010; 2010; 2010; 2010; +12 more |
| CVE-2020-17084 | 8.5 | Nov 11 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2020-17141 | 8.4 | Dec 10 | Microsoft Exchange Remote Code Execution Vulnerability Affected: 2016; 2016; 2019; 2019 |
| CVE-2020-16875 | 8.4 | Sep 11 | <p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfully exploited the… Affected: 2016; 2016; 2019; 2019 |
| CVE-2022-21978 | 8.2 | May 10 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2026-69380 | 8.1 | Sep 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2026-55007 | 8.1 | Sep 8 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2019; 2019 |
| CVE-2026-45583 | 8.1 | Jun 9 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2020-0692 | 8.1 | Feb 11 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability' Affected: 2013; 2016; 2016; 2019; 2019 |
| CVE-2019-1136 | 8.1 | Jul 15 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability' Affected: 2010; 2013; 2013; 2013 |
| CVE-2019-0724 | 8.1 | Mar 5 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability' Affected: 2010; 2013; 2016; 2019 |
| CVE-2017-11932 | 8.1 | Dec 12 | Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way Outlook Web Access (OWA) validates web requests, aka… Affected: 2016; 2016 |
| CVE-2026-62911 | 8.0 | Aug 11 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 2016; 2016; 2016; 2016; 2016; 2016; +31 more |
| CVE-2025-53786 | 8.0 | Aug 6 | Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36439 | 8.0 | Nov 14 | Microsoft Exchange Server Remote Code Execution Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36050 | 8.0 | Nov 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |
| CVE-2023-36039 | 8.0 | Nov 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 2016; 2019; 2019 |