Microsoft Microsoft Exchange Server Subscription Edition RTM
46 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-87696 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.5 | 0.4 % | ||
| CVE-2026-87695 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-87692 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.8 | 1.7 % | ||
| CVE-2026-77910 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-70571 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.1 | 1.4 % | ||
| CVE-2026-70279 | 15.02.0.0 – < 15.02.2562.056 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL 9.3 | 1.3 % | ||
| CVE-2026-96940 | 15.02.0.0 – < 15.02.2562.053 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 2.7 % | ||
| CVE-2026-69641 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Elevation of Privilege Vulnerability | CRITICAL 9.1 | 0.9 % | ||
| CVE-2026-69382 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Information Disclosure Vulnerability | MEDIUM 5.9 | 0.5 % | ||
| CVE-2026-69380 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.1 | 0.7 % | ||
| CVE-2026-69378 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Denial of Service Vulnerability | HIGH 7.5 | 1.2 % | ||
| CVE-2026-69375 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Tampering Vulnerability | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-69361 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 6.5 | 0.8 % | ||
| CVE-2026-69356 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL 9.3 | 0.8 % | ||
| CVE-2026-69355 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-55007 | 15.02.0.0 – < 15.02.2562.049 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.1 | 0.7 % | ||
| CVE-2026-62911 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.0 | 0.7 % | ||
| CVE-2026-65813 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-62915 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Security Feature Bypass Vulnerability | MEDIUM 6.5 | 0.6 % | ||
| CVE-2026-62914 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Spoofing Vulnerability | HIGH 7.3 | 0.4 % | ||
| CVE-2026-62913 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.8 | 0.9 % | ||
| CVE-2026-62912 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Denial of Service Vulnerability | MEDIUM 6.5 | 2.0 % | ||
| CVE-2026-62910 | 15.02.0.0 – < 15.02.2562.046 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-55009 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.8 | 2.5 % | ||
| CVE-2026-55008 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Spoofing Vulnerability | CRITICAL 9.6 | 0.9 % | ||
| CVE-2026-55006 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.8 | 0.3 % | ||
| CVE-2026-55005 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.8 | 1.0 % | ||
| CVE-2026-47631 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Spoofing Vulnerability | HIGH 8.1 | 0.4 % | ||
| CVE-2026-45583 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Remote Code Execution Vulnerability | HIGH 8.1 | 0.5 % | ||
| CVE-2026-45504 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 1.2 % | ||
| CVE-2026-45503 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Information Disclosure Vulnerability | HIGH 8.1 | 0.4 % | ||
| CVE-2026-45502 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Information Disclosure Vulnerability | MEDIUM 5.0 | 20 % | ||
| CVE-2026-45501 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-45500 | 15.02.0.0 – < 15.02.2562.045 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 6.1 | 0.4 % | ||
| CVE-2026-42897 | 15.02.0.0 – < 15.02.2562.043 | Microsoft Exchange Server Spoofing Vulnerability | HIGH 8.1 | 71 % | KEV | |
| CVE-2026-21527 | 15.02.0.0 – < 15.02.2562.037 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 6.5 | 8.3 % | ||
| CVE-2025-64666 | 15.02.0.0 – < 15.02.2562.035 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2025-64667 | 15.02.0.0 – < 15.02.2562.035 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 5.3 | 0.8 % | ||
| CVE-2025-59248 | 15.02.0.0 – < 15.02.2562.029 | Microsoft Exchange Server Spoofing Vulnerability | HIGH 7.5 | 1.0 % | ||
| CVE-2025-59249 | 15.02.0.0 – < 15.02.2562.029 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.8 | 0.8 % | ||
| CVE-2025-53782 | 15.02.0.0 – < 15.02.2562.029 | Microsoft Exchange Server Elevation of Privilege Vulnerability | HIGH 8.4 | 0.4 % | ||
| CVE-2025-25007 | 15.02.0.0 – < 15.02.2562.020 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 5.3 | 0.9 % | ||
| CVE-2025-25006 | 15.02.0.0 – < 15.02.2562.020 | Microsoft Exchange Server Spoofing Vulnerability | MEDIUM 5.3 | 0.9 % | ||
| CVE-2025-25005 | 15.02.0.0 – < 15.02.2562.020 | Microsoft Exchange Server Tampering Vulnerability | MEDIUM 6.5 | 1.4 % | ||
| CVE-2025-33051 | 15.02.0.0 – < 15.02.2562.020 | Microsoft Exchange Server Information Disclosure Vulnerability | HIGH 7.5 | 1.3 % | ||
| CVE-2025-53786 | 15.02.0.0 – < 15.02.2562.017 | Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability | HIGH 8.0 | 7.6 % |