Microsoft Exchange Server
258 CVEs affecting Microsoft Exchange Server. Latest disclosed: 2026-08-11. Critical: 21, High: 93.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21410 | Critical | 9.8 | 2024-02-13 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21709 | Critical | 9.8 | 2023-08-08 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-28481 | Critical | 9.8 | 2021-04-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-28480 | Critical | 9.8 | 2021-04-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2019-1373 | Critical | 9.8 | 2019-11-12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code… |
CVE-2019-0586 | Critical | 9.8 | 2019-01-08 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8302 | Critical | 9.8 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8154 | Critical | 9.8 | 2018-05-09 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2026-55008 | Critical | 9.6 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform sp… |
CVE-2021-34473 | Critical | 9.1 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-27078 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26855 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26412 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2020-17142 | Critical | 9.1 | 2020-12-10 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2020-17132 | Critical | 9.1 | 2020-12-10 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2022-21969 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2022-21855 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2022-21846 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26427 | Critical | 9.0 | 2021-10-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-34523 | Critical | 9.0 | 2021-07-14 | Microsoft Exchange Server Elevation of Privilege Vulnerability |