ME
Product
Microsoft Exchange Server 2016 Cumulative Update 23
On CISA KEVExploited in the wildRansomware-linked
45
CVEs
6
On KEV
9.8
Max CVSS
7
New 30D
Severity mix
Critical 5High 25Medium 15Low 0
Watch
Add Microsoft Exchange Server 2016 Cumulative Update 23 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-21410 In wildKEV | 9.8 | Feb 13 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 15.01.0 before 15.01.2507.037 |
| CVE-2026-55008 | 9.6 | Jul 14 | Microsoft Exchange Server Spoofing Vulnerability Affected: 15.01.0.0 before 15.01.2507.071 |
| CVE-2026-70279 | 9.3 | Oct 13 | Microsoft Exchange Server Spoofing Vulnerability Affected: 15.01.0.0 before 15.01.2507.077 |
| CVE-2026-69356 | 9.3 | Sep 8 | Microsoft Exchange Server Spoofing Vulnerability Affected: 15.01.0.0 before 15.01.2507.073 |
| CVE-2026-69641 | 9.1 | Sep 8 | Microsoft Exchange Server Elevation of Privilege Vulnerability Affected: 15.01.0.0 before 15.01.2507.073 |
Showing 5
