Known vulnerabilities in Microsoft Exchange Server - page 12

Vendor: Microsoft
Software CPE: cpe:2.3:a:microsoft:microsoft_exchange_server:*:*:*:*:*:*:*:*
Total vulnerabilities: 232
Public exploits: 37
Known exploited (KEV): 20

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Exchange Server Microsoft Exchange Server is affected by 232 known vulnerabilities: 8 critical, 48 high, 109 medium, 67 low Critical High Medium Low

Vulnerabilities (232)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU155261 - Improper Verification of Cryptographic Signature
CVE-2026-87696
CWE-347 Low
No
No
15.01.2507.077, 15.02.1544.050, 15.02.1748.055 14.10.2026 SB2026101411
#VU155260 - Inclusion of Functionality from Untrusted Control Sphere
CVE-2026-87695
CWE-829 Low
No
No
15.01.2507.077, 15.02.1544.050, 15.02.1748.055 14.10.2026 SB2026101411
#VU155257 - Deserialization of Untrusted Data
CVE-2026-87692
CWE-502 Low
No
No
15.01.2507.077, 15.02.1544.050 14.10.2026 SB2026101411
#VU154955 - Incorrect Authorization
CVE-2026-77910
CWE-863 Medium
No
No
15.01.2507.077, 15.02.1544.050, 15.02.1748.055 14.10.2026 SB2026101411
#VU154954 - Stack-based buffer overflow
CVE-2026-70571
CWE-121 High
No
No
15.01.2507.077, 15.02.1544.050, 15.02.1748.055 14.10.2026 SB2026101411
#VU154951 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-70279
CWE-79 Medium
No
No
15.01.2507.077, 15.02.1544.050, 15.02.1748.055 14.10.2026 SB2026101411
#VU154225 - Weak Authentication
CVE-2026-96940
CWE-1390 Low
No
No
SE RTM Sep26SUv2 15.02.2562.053, 2016 CU23 Sep26SUv2 15.01.2507.075, 2019 CU14 Sep26SUv2 15.02.1544.048, 2019 CU15 Sep26SUv2 15.02.1748.053 13.10.2026 SB2026101345
#VU2627 - Permissions, Privileges, and Access Controls
CVE-2016-3577
CWE-264 Low
No
No
- 30.11.-0001 SB2016091306
#VU2628 - Permissions, Privileges, and Access Controls
CVE-2016-3578
CWE-264 Low
No
No
- 30.11.-0001 SB2016091306
#VU2629 - Permissions, Privileges, and Access Controls
CVE-2016-3579
CWE-264 Low
No
No
- 30.11.-0001 SB2016091306
#VU2630 - Permissions, Privileges, and Access Controls
CVE-2016-3580
CWE-264 Low
No
No
- 30.11.-0001 SB2016091306
#VU2634 - Permissions, Privileges, and Access Controls
CVE-2016-3590
CWE-264 Low
No
No
- 30.11.-0001 SB2016091306


Showing elements 221 - 240 out of 232