Archive

14 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /14 June 2026 →

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.1

CVE-2026-42897 Exploited Public exploit EPSS 71%

Microsoft Exchange Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server Subscription Edition RTM Microsoft Exchange Server 2019 Cumulative Update 14

May 14, 2026
KEV May 15, 2026