Microsoft Exchange Server
268 CVEs affecting Microsoft Exchange Server. Latest disclosed: 2026-10-02. Critical: 23, High: 98.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-21410 | Critical | 9.8 | 2024-02-13 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21709 | Critical | 9.8 | 2023-08-08 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2021-28481 | Critical | 9.8 | 2021-04-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-28480 | Critical | 9.8 | 2021-04-13 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2019-1373 | Critical | 9.8 | 2019-11-12 | A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code… |
CVE-2019-0586 | Critical | 9.8 | 2019-01-08 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8302 | Critical | 9.8 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8154 | Critical | 9.8 | 2018-05-09 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2026-55008 | Critical | 9.6 | 2026-07-14 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform sp… |
CVE-2026-69356 | Critical | 9.3 | 2026-09-08 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform sp… |
CVE-2026-69641 | Critical | 9.1 | 2026-09-08 | Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
CVE-2021-34473 | Critical | 9.1 | 2021-07-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-27078 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26855 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-26412 | Critical | 9.1 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2020-17142 | Critical | 9.1 | 2020-12-10 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2020-17132 | Critical | 9.1 | 2020-12-10 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2022-21969 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2022-21855 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2022-21846 | Critical | 9.0 | 2022-01-11 | Microsoft Exchange Server Remote Code Execution Vulnerability |