ME
Product
Microsoft Exchange Server 2016 Cumulative Update 23
by Microsoft · last CVE Oct 13, 2026
On CISA KEVExploited in the wildRansomware-linked
51
CVEs
6
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 5High 29Medium 17Low 0
Watch

Add Microsoft Exchange Server 2016 Cumulative Update 23 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-21529
RansomwareIn wildKEV
8.8
59%
Feb 14
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected: 15.01.0 before 15.01.2507.021
CVE-2022-41080
RansomwareIn wildKEV
8.8
77%
Nov 9
Microsoft Exchange Server Elevation of Privilege Vulnerability
Affected: 15.01.0 before 15.01.2507.016
CVE-2022-41040
RansomwareIn wildKEV
8.8
100%
Oct 3
Microsoft Exchange Server Elevation of Privilege Vulnerability
Affected: 15.01.0 before 15.01.2507.016
CVE-2022-41082
RansomwareIn wildKEV
8.0
100%
Oct 3
Microsoft Exchange Server Remote Code Execution Vulnerability
Affected: 15.01.0 before 15.01.2507.016
Showing 4