Microsoft Exchange Server at a glance
1 of the exploited vulnerabilities are known to be used by ransomware (CISA).
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 0 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 0 | 0 |
| Mar 2026 | 0 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 0 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 0 | 0 |
| Dec 2024 | 0 | 0 |
20 results · Feed
-
Unscored —
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation o…
-
Unscored —
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —CVE-2019-0586 EPSS 15%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors …
-
Unscored —
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft E…
-
High 7.4
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation o…
KEV Mar 3, 2022 -
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
Unscored —CVE-2018-8265 EPSS 19%
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email mess…
-
Unscored —
A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft E…
-
Unscored —CVE-2018-8302 EPSS 27%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —
An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Micro…
-
Unscored —CVE-2018-8154 EPSS 24%
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle …
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
Unscored —
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handl…
-
Unscored —
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web…
-
Unscored —
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a spec…
-
Unscored —
Microsoft Exchange Server 2016 CU5 and Microsoft Exchange Server 2016 CU5 allow a spoofing vulnerability due to the way…
-
Unscored —
Microsoft Exchange Server 2013 and Microsoft Exchange Server 2016 allow an input sanitization issue with Microsoft Exch…