Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscr…Check if you run itEPSS 0.38%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Check if you run itEPSS 0.24%Oct 13, 2026
- High7.8Affected Microsoft products: Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2016 Cu…Check if you run itEPSS 1.59%Oct 13, 2026
- High8.8Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 C…Check if you run itEPSS 0.77%Oct 13, 2026
- High8.1Affected Microsoft products: Microsoft Exchange Server Subscription Edition RTM, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server 2019 Cu…Check if you run itEPSS 0.93%Oct 13, 2026
- Critical9.3Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 15, Microsoft Exchange Server Subscr…Check if you run itEPSS 0.86%Oct 13, 2026
- High8.8Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.48%Oct 2, 2026
- High8.0Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 0.69%Aug 11, 2026
- High8.8Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.Check if you run itEPSS 1.01%Jul 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 0.52%May 14, 2026
- Medium5.3User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.80%Dec 9, 2025
- High7.5Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.02%Dec 9, 2025
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 36.24%Jul 25, 2024
- UnknownMicrosoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 79.72%May 24, 2024
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityPatch nowKEVEPSS 31.79%May 6, 2024
- Critical9.8Microsoft Exchange Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 12.56%Feb 13, 2024
- High8.8Microsoft Exchange Server Deserialization of Untrusted Data VulnerabilityPatch nowKEVEPSS 59.29%Feb 14, 2023
- High8.8Microsoft Exchange Server Privilege Escalation VulnerabilityPatch nowKEVEPSS 77.33%Nov 9, 2022
- UnknownMicrosoft Exchange Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 46.50%Oct 21, 2022
- High8.0Microsoft Exchange Server Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.97%Sep 29, 2022
- High8.8Microsoft Exchange Server Server-Side Request Forgery VulnerabilityPatch nowKEVEPSS 99.96%Sep 29, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 4.38%Sep 14, 2022
- UnknownMicrosoft Exchange Server Privilege EscalationPatch nowKEVEPSS 1.23%Sep 14, 2022
- UnknownMicrosoft Exchange Server Spoofing VulnerabilityPatch nowKEVEPSS 93.50%May 31, 2022
- UnknownMicrosoft Exchange Server Remote Code ExecutionPatch nowKEVEPSS 13.01%Jan 17, 2022
42 records · page 1 of 2
PreviousNext