Known vulnerabilities in Microsoft Exchange Server
Vendor:
Microsoft
Software:
Microsoft Exchange Server
Software CPE:
cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Website:
https://www.microsoft.com
Total vulnerabilities:
216
Public exploits:
36
Known exploited (KEV):
20
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
15.02.1544.044
15.02.2562.046
15.02.1748.049
15.01.2507.072
15.01.2507.066
15.02.1748.048
15.02.2562.045
15.02.1544.043
15.01.2507.071
15.02.1544.041
15.02.2562.043
15.02.1748.046
15.01.2507.069
SE RTM May26HU 15.02.2562.041
SE RTM Feb26SU 15.02.2562.037
2019 CU15 Feb26SU 15.02.1748.043
2019 CU14 Feb26SU 15.02.1544.039
2016 CU23 Feb26SU 15.01.2507.066
2016 CU23 Dec25SU 15.01.2507.063
2019 CU14 Dec25SU 15.02.1544.037
2019 CU15 Dec25SU 15.02.1748.042
SE RTM Dec25SU 15.02.2562.035
SE RTM Oct25SU 15.02.2562.029
SE RTM Sep25HU 15.02.2562.027
2019 CU15 Oct25SU 15.02.1748.039
2019 CU14 Oct25SU 15.02.1544.036
2019 CU15 Sep25HU 15.02.1748.037
2019 CU14 Sep25HU 15.02.1544.034
2016 CU23 Sep25HU 15.01.2507.059
2016 CU23 Oct25SU 15.01.2507.061
2016 CU23 Aug25SU 15.01.2507.058
2019 CU14 15.02.1544.033
2019 CU15 15.02.1748.036
SE RTM Aug25SU 15.02.2562.020
SE RTM 15.02.2562.017
2016 CU23 May25HU 15.01.2507.057
2016 CU23 Apr25HU 15.01.2507.055
2016 CU23 Nov24SUv2 15.01.2507.044
2019 CU15 May25HU 15.02.1748.026
2019 CU15 Apr25HU 15.02.1748.024
2019 CU15 (2025H1) 15.02.1748.010
2019 CU14 May25HU 15.02.1544.027
2019 CU14 Apr25HU 15.02.1544.025
2019 CU14 Nov24SUv2 15.02.1544.014
2016 CU23 Nov24HU 15.01.2507.043
2019 CU13 Nov24HU 15.02.1258.038
2019 CU14 Nov24HU 15.02.1544.013
2019 CU14 Apr24HU 15.02.1544.011
2019 CU13 Apr24HU 15.02.1258.034
2016 CU23 Apr24HU 15.01.2507.039
2016 CU23 Mar24SU 15.01.2507.037
2019 CU13 Mar24SU 15.02.1258.032
2019 CU14 Mar24SU 15.02.1544.009
2019 CU14 2024H1 15.02.1544.004
2016 CU23 Nov23SU 15.01.2507.035
2019 CU12 Nov23SU 15.02.1118.040
2019 CU13 Nov23SU 15.02.1258.028
2016 CU23 Oct23SU 15.01.2507.034
2019 CU12 Oct23SU 15.02.1118.039
2019 CU13 Oct23SU 15.02.1258.027
2016 CU23 Aug23SUv2 15.01.2507.032
2019 CU13 Aug23SUv2 15.02.1258.025
2019 CU12 Sep23SU 15.02.1118.037
2019 CU12 Aug23SU 15.02.1118.036
2016 CU23 Aug23SU 15.01.2507.031
2019 CU13 Aug23SU 15.02.1258.023
2019 CU13 Jun23SU 15.02.1258.016
2019 CU13 (2023H1) 15.02.1258.012
2019 CU12 Jun23SU 15.02.1118.030
2019 CU12 Mar23SU 15.02.1118.026
2016 CU23 Jun23SU 15.01.2507.027
2016 CU23 Mar23SU 15.01.2507.023
2013 CU23 Mar23SU 15.00.1497.048
2013 CU23 Feb23SU 15.00.1497.047
2016 CU23 Feb23SU 15.01.2507.021
2019 CU11 Feb23SU 15.02.0986.041
2019 CU12 Feb23SU 15.02.1118.025
2013 CU23 Jan23SU 15.00.1497.045
2016 CU23 Jan23SU 15.01.2507.017
2019 CU11 Jan23SU 15.02.0986.037
2019 CU12 Jan23SU 15.02.1118.021
2013 CU23 Oct22SU 15.00.1497.042
2016 CU22 Oct22SU 15.01.2375.032
2016 CU23 Oct22SU 15.01.2507.013
2019 CU12 Oct22SU 15.02.1118.015
2019 CU11 Oct22SU 15.02.0986.030
2013 CU23 Nov22SU 15.00.1497.044
2016 CU22 Nov22SU 15.01.2375.037
2016 CU23 Nov22SU 15.01.2507.016
2019 CU11 Nov22SU 15.02.0986.036
2019 CU12 Nov22SU 15.02.1118.020
2013 Cumulative Update 21 Mar21SU 15.00.1395.012
2013 Cumulative Update 22 Mar21SU 15.00.1473.006
2013 Cumulative Update 23 Mar21SU 15.00.1497.012
2013 Cumulative Update 23 Apr21SU 15.00.1497.015
2013 Cumulative Update 23 May21SU 15.00.1497.018
2013 Cumulative Update 23 Jul21SU 15.00.1497.023
2013 Cumulative Update 23 Oct21SU 15.00.1497.024
2013 Cumulative Update 23 Nov21SU 15.00.1497.026
2013 Cumulative Update 23 Jan22SU 15.00.1497.028
2013 Cumulative Update 23 Mar22SU 15.00.1497.033
2013 Cumulative Update 23 May22SU 15.00.1497.036
2013 Cumulative Update 23 Aug22SU 15.00.1497.040
2016 Preview 15.01.0225.016
2016 Cumulative Update 8 Mar21SU 15.01.1415.010
2016 Cumulative Update 9 Mar21SU 15.01.1466.016
2016 Cumulative Update 10 Mar21SU 15.01.1531.012
2016 Cumulative Update 11 Mar21SU 15.01.1591.018
2016 Cumulative Update 12 Mar21SU 15.01.1713.010
2016 Cumulative Update 13 Mar21SU 15.01.1779.008
2016 Cumulative Update 14 Mar21SU 15.01.1847.012
2016 Cumulative Update 15 Mar21SU 15.01.1913.012
2016 Cumulative Update 16 Mar21SU 15.01.1979.008
2016 Cumulative Update 17 Mar21SU 15.01.2044.013
2016 Cumulative Update 18 Mar21SU 15.01.2106.013
2016 Cumulative Update 19 Mar21SU 15.01.2176.009
2016 Cumulative Update 19 Apr21SU 15.01.2176.012
2016 Cumulative Update 19 May21SU 15.01.2176.014
2016 Cumulative Update 20 Apr21SU 15.01.2242.008
2016 Cumulative Update 20 May21SU 15.01.2242.010
2016 Cumulative Update 20 Jul21SU 15.01.2242.012
2016 Cumulative Update 21 Jul21SU 15.01.2308.014
2016 Cumulative Update 21 Oct21SU 15.01.2308.015
2016 Cumulative Update 21 Nov21SU 15.01.2308.020
2016 Cumulative Update 21 Jan22SU 15.01.2308.021
2016 Cumulative Update 21 Mar22SU 15.01.2308.027
2016 Cumulative Update 22 Oct21SU 15.01.2375.012
2016 Cumulative Update 22 Nov21SU 15.01.2375.017
2016 Cumulative Update 22 Jan22SU 15.01.2375.018
2016 Cumulative Update 22 Mar22SU 15.01.2375.024
2016 Cumulative Update 22 May22SU 15.01.2375.028
2016 Cumulative Update 22 Aug22SU 15.01.2375.031
2016 Cumulative Update 23 (2022H1) 15.01.2507.006
2016 Cumulative Update 23 May22SU 15.01.2507.009
2016 Cumulative Update 23 Aug22SU 15.01.2507.012
2019 RTM Mar21SU 15.02.0221.018
2019 Cumulative Update 1 Mar21SU 15.02.0330.011
2019 Cumulative Update 2 Mar21SU 15.02.0397.011
2019 Cumulative Update 3 Mar21SU 15.02.0464.015
2019 Cumulative Update 4 Mar21SU 15.02.0529.013
2019 Cumulative Update 5 Mar21SU 15.02.0595.008
2019 Cumulative Update 6 Mar21SU 15.02.0659.012
2019 Cumulative Update 7 Mar21SU 15.02.0721.013
2019 Cumulative Update 8 Mar21SU 15.02.0792.010
2019 Cumulative Update 8 Apr21SU 15.02.0792.013
2019 Cumulative Update 8 May21SU 15.02.0792.015
2019 Cumulative Update 9 Apr21SU 15.02.0858.010
2019 Cumulative Update 9 May21SU 15.02.0858.012
2019 Cumulative Update 9 Jul21SU 15.02.0858.015
2019 Cumulative Update 10 Jul21SU 15.02.0922.013
2019 Cumulative Update 10 Oct21SU 15.02.0922.014
2019 Cumulative Update 10 Nov21SU 15.02.0922.019
2019 Cumulative Update 10 Jan22SU 15.02.0922.020
2019 Cumulative Update 10 Mar22SU 15.02.0922.027
2019 Cumulative Update 11 Oct21SU 15.02.0986.009
2019 Cumulative Update 11 Nov21SU 15.02.0986.014
2019 Cumulative Update 11 Jan22SU 15.02.0986.015
2019 Cumulative Update 11 Mar22SU 15.02.0986.022
2019 Cumulative Update 11 May22SU 15.02.0986.026
2019 Cumulative Update 11 Aug22SU 15.02.0986.029
2019 Cumulative Update 12 (2022H1) 15.02.1118.007
2019 Cumulative Update 12 May22SU 15.02.1118.009
2019 Cumulative Update 12 Aug22SU 15.02.1118.012
2019 Preview 15.02.0196.000
2016 Cumulative Update 23 15.01.2507.006
2019 Cumulative Update 12 15.02.1118.007
2019 Cumulative Update 11 15.02.0986.005
2016 Cumulative Update 22 15.01.2375.007
2016 Cumulative Update 21 15.01.2308.008
2019 Cumulative Update 10 15.02.0922.007
2019 Cumulative Update 9 15.02.0858.005
2016 Cumulative Update 20 15.01.2242.004
2016 Cumulative Update 19 15.01.2176.002
2019 Cumulative Update 8 15.02.0792.003
2010 Service Pack 3 Update Rollup 31
2019 Cumulative Update 7 15.02.0721.002
2016 Cumulative Update 18 15.01.2106.002
2019 Cumulative Update 6 15.02.0659.004
2016 Cumulative Update 17 15.01.2044.004
2016 Cumulative Update 16 15.01.1979.003
2010 Service Pack 3 Update Rollup 30
2010 Service Pack 3 Update Rollup 29
2010 Service Pack 3 Update Rollup 28
2010 Service Pack 3 Update Rollup 27
2019 Cumulative Update 5 15.02.0595.003
2019 Cumulative Update 4 15.02.0529.005
2016 Cumulative Update 15 15.01.1913.005
2019 Cumulative Update 3 15.02.0464.005
2016 Cumulative Update 14 15.01.1847.003
2019 Cumulative Update 2 15.02.0397.003
2016 Cumulative Update 13 15.01.1779.002
2013 Cumulative Update 23 15.00.1497.002
2010 Service Pack 3 Update Rollup 26
2013 Cumulative Update 22 15.00.1473.003
2016 Cumulative Update 12 15.01.1713.005
2019 Cumulative Update 1 15.02.0330.005
2010 Service Pack 3 Update Rollup 25
2010 Service Pack 3 Update Rollup 24
2016 Cumulative Update 11 15.01.1591.010
2019 RTM 15.02.0221.012
2010 Service Pack 3 Update Rollup 23
2010 Service Pack 3 Update Rollup 19
2010 Service Pack 3 Update Rollup 18
2010 Service Pack 3 Update Rollup 17
2010 Service Pack 3 Update Rollup 16
2010 Service Pack 3 Update Rollup 15
2010 Service Pack 3 Update Rollup 14
2010 Service Pack 3 Update Rollup 13
2010 Service Pack 3 Update Rollup 12
2010 Service Pack 3 Update Rollup 11
2010 Service Pack 3 Update Rollup 10
2010 Service Pack 3 Update Rollup 9
2010 Service Pack 3 Update Rollup 8
2010 Service Pack 3 Update Rollup 7
2010 Service Pack 3 Update Rollup 6
2010 Service Pack 3 Update Rollup 5
2010 Service Pack 3 Update Rollup 4
2010 Service Pack 3 Update Rollup 3
2010 Service Pack 3 Update Rollup 2
2010 Service Pack 3 Update Rollup 1
2010 Service Pack 3
2010 Service Pack 2 Update Rollup 8
2010 Service Pack 2 Update Rollup 7
2010 Service Pack 2 Update Rollup 6
2010 Service Pack 2 Update Rollup 5
2010 Service Pack 2 Update Rollup 4
2010 Service Pack 2 Update Rollup 3
2010 Service Pack 2 Update Rollup 2
2010 Service Pack 2 Update Rollup 1
2010 Service Pack 2
2010 Service Pack 1 Update Rollup 8
2010 Service Pack 1 Update Rollup 7
2010 Service Pack 1 Update Rollup 6
2010 Service Pack 1 Update Rollup 5
2010 Service Pack 1 Update Rollup 4
2010 Service Pack 1 Update Rollup 3
2010 Service Pack 1 Update Rollup 2
2010 Service Pack 1 Update Rollup 1
2010 Service Pack 1
2010 Update Rollup 5
2010 Update Rollup 4
2010 Update Rollup 3
2010 Update Rollup 2
2010 Update Rollup 1
2007 SP3 Update Rollup 23
2007 SP3 Update Rollup 22
2007 SP3 Update Rollup 21
2007 SP3 Update Rollup 20
2007 SP3 Update Rollup 19
2007 SP3 Update Rollup 18
2007 SP3 Update Rollup 17
2007 SP3 Update Rollup 16
2007 SP3 Update Rollup 15
2007 SP3 Update Rollup 14
2007 SP3 Update Rollup 13
2007 SP3 Update Rollup 12
2007 SP3 Update Rollup 11
2007 SP3 Update Rollup 10
2007 SP3 Update Rollup 9
2007 SP3 Update Rollup 8
2007 SP3 Update Rollup 7
2007 SP3 Update Rollup 6
2007 SP3 Update Rollup 5
2007 SP3 Update Rollup 4
2007 SP3 Update Rollup 3
2007 SP3 Update Rollup 2
2007 SP3 Update Rollup 1
2007 SP3
2007 SP2 Update Rollup 5
2007 SP2 Update Rollup 4
2007 SP2 Update Rollup 3
2007 SP2 Update Rollup 2
2007 SP2 Update Rollup 1
2007 SP2
2007 SP1 Update Rollup 10
2007 SP1 Update Rollup 9
2007 SP1 Update Rollup 8
2007 SP1 Update Rollup 7
2007 SP1 Update Rollup 6
2007 SP1 Update Rollup 5
2007 SP1 Update Rollup 4
2007 SP1 Update Rollup 3
2007 SP1 Update Rollup 2
2007 SP1 Update Rollup 1
2007 SP1
2007 Update Rollup 7
2007 Update Rollup 6
2007 Update Rollup 5
2007 Update Rollup 4
2007 Update Rollup 3
2007 Update Rollup 2
2007 Update Rollup 1
2003 post- SP2 6.5.7654.4
2003 post-SP2 6.5.7653.33
2003 SP2
2003 SP1
2003
2000 post-SP3 6.0.6620.7
2000 post-SP3 6.0.6620.5
2000 post-SP3 6.0.6603
2000 post-SP3 6.0.6556
2000 SP3
2000 SP2
2000 SP1
2000
5.5 SP4
5.5 SP3
5.5 SP2
5.5 SP1
5.5
5.0 SP2
5.0 SP1
5.0
4.0 SP5
4.0 SP4
4.0 SP3
4.0 SP2
4.0 SP1
4.0
2010 Service Pack 3 Update Rollup 22
2010 Service Pack 3 Update Rollup 21
2016 Cumulative Update 10 15.01.1531.003
2016 Cumulative Update 9 15.01.1466.003
2013 Cumulative Update 21 15.00.1395.004
2013 Cumulative Update 20 15.00.1367.003
2013 Cumulative Update 19 15.00.1365.001
2010 Service Pack 3 Update Rollup 20
2016 Cumulative Update 8 15.01.1415.002
2016 Cumulative Update 7 15.01.1261.035
2013 Cumulative Update 18 15.00.1347.002
2013 Cumulative Update 17 15.00.1320.004
2016 Cumulative Update 6 15.01.1034.026
2013 Cumulative Update 16 15.00.1293.002
2013 Cumulative Update 15 15.00.1263.005
2016 Cumulative Update 5 15.01.0845.034
2016 Cumulative Update 4 15.01.0669.032
2016 Cumulative Update 3 15.01.0544.027
2016 Cumulative Update 2 15.01.0466.034
2016 Cumulative Update 1 15.01.0396.030
2013 Cumulative Update 14 15.00.1236.003
2013 Cumulative Update 13 15.00.1210.003
2013 Cumulative Update 12 15.00.1178.004
2013 Cumulative Update 11 15.00.1156.006
2013 Cumulative Update 10 15.00.1130.007
2013 Cumulative Update 9 15.00.1104.005
2013 Cumulative Update 8 15.00.1076.009
2013 Cumulative Update 7 15.00.1044.025
2013 Cumulative Update 6 15.00.0995.029
2013 Cumulative Update 5 15.00.0913.022
2013 Service Pack 1 Mar21SU 15.00.0847.064
2013 Cumulative Update 3 15.00.0775.038
2013 Cumulative Update 2 15.00.0712.024
2013 Cumulative Update 1 15.00.0620.029
2013 Service Pack 1 15.00.0847.032
2007
2010
2016 RTM 15.01.0225.042
2013 RTM
5.0.2195.6713
Vulnerabilities (216)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU141972 - Authentication Bypass by Capture-replay CVE-2026-62911 |
CWE-294 | Medium | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 12.08.2026 |
SB2026081147 |
||
| #VU141479 - Server-Side Request Forgery (SSRF) CVE-2026-65813 |
CWE-918 | Low | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU141478 - Missing Authorization CVE-2026-62915 |
CWE-862 | Low | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU141476 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-62914 |
CWE-79 | Low | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU141475 - Heap-based Buffer Overflow CVE-2026-62913 |
CWE-122 | Medium | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU141474 - Deserialization of Untrusted Data CVE-2026-62912 |
CWE-502 | Low | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU141473 - Improper Control of Resource Identifiers ('Resource Injection') CVE-2026-62910 |
CWE-99 | Low | 15.01.2507.072, 15.02.1544.044, 15.02.1748.049, 15.02.2562.046 | 11.08.2026 |
SB2026081147 |
||
| #VU137892 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-55008 |
CWE-79 | Low | 15.01.2507.071, 15.02.1544.043, 15.02.1748.048, 15.02.2562.045 | 16.07.2026 |
SB2026071628 |
||
| #VU137891 - Insufficient Granularity of Access Control CVE-2026-55006 |
CWE-1220 | Low | 15.01.2507.071, 15.02.1544.043, 15.02.1748.048, 15.02.2562.045 | 16.07.2026 |
SB2026071628 |
||
| #VU137890 - Heap-based Buffer Overflow CVE-2026-55005 |
CWE-122 | Medium | 15.01.2507.071, 15.02.1544.043, 15.02.1748.048, 15.02.2562.045 | 16.07.2026 |
SB2026071628 |
||
| #VU137889 - Deserialization of Untrusted Data CVE-2026-55009 |
CWE-502 | Low | 15.01.2507.071, 15.02.1544.043, 15.02.1748.048, 15.02.2562.045 | 16.07.2026 |
SB2026071628 |
||
| #VU134075 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-47631 |
CWE-79 | Low | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134074 - Improper Control of Generation of Code ('Code Injection') CVE-2026-45583 |
CWE-94 | High | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134073 - Server-Side Request Forgery (SSRF) CVE-2026-45504 |
CWE-918 | Medium | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134072 - Server-Side Request Forgery (SSRF) CVE-2026-45503 |
CWE-918 | Medium | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134071 - Server-Side Request Forgery (SSRF) CVE-2026-45502 |
CWE-918 | Medium | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134070 - Server-Side Request Forgery (SSRF) CVE-2026-45501 |
CWE-918 | Medium | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU134069 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-45500 |
CWE-79 | Low | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 09.06.2026 |
SB2026060965 |
||
| #VU131560 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-42897 |
CWE-79 | High | 15.01.2507.069, 15.02.1544.041, 15.02.1748.046, 15.02.2562.043 | 15.05.2026 |
SB2026051542 |
||
| #VU122555 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2026-21527 |
CWE-451 | Medium | SE RTM Feb26SU 15.02.2562.037, 2016 CU23 Feb26SU 15.01.2507.066, 2019 CU14 Feb26SU 15.02.1544.039, 2019 CU15 Feb26SU 15.02.1748.043 | 10.02.2026 |
SB2026021066 |
Showing elements 1 - 20 out of 216