Search Results (268 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-69356 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-10 9.3 Critical
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-69641 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-09 9.1 Critical
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69380 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-09 8.1 High
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69355 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-09 8.8 High
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-55007 1 Microsoft 5 Exchange Server 2019, Exchange Server Se, Microsoft Exchange Server 2019 Cumulative Update 14 and 2 more 2026-09-09 8.1 High
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
CVE-2026-69361 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-09-09 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-69378 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-08 7.5 High
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
CVE-2026-69382 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-08 5.9 Medium
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
CVE-2026-69375 1 Microsoft 3 Exchange Server 2016, Exchange Server 2019, Exchange Server Se 2026-09-08 6.5 Medium
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
CVE-2026-62911 1 Microsoft 5 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 2 more 2026-09-01 8 High
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-65813 1 Microsoft 9 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 6 more 2026-08-29 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2021-26858 1 Microsoft 1 Exchange Server 2026-08-19 7.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27065 1 Microsoft 1 Exchange Server 2026-08-19 7.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26857 1 Microsoft 1 Exchange Server 2026-08-19 7.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27078 1 Microsoft 1 Exchange Server 2026-08-19 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855 1 Microsoft 1 Exchange Server 2026-08-19 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26854 1 Microsoft 1 Exchange Server 2026-08-19 6.6 Medium
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26412 1 Microsoft 1 Exchange Server 2026-08-19 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-42305 1 Microsoft 1 Exchange Server 2026-08-19 6.5 Medium
Microsoft Exchange Server Spoofing Vulnerability
CVE-2021-41349 1 Microsoft 1 Exchange Server 2026-08-19 6.5 Medium
Microsoft Exchange Server Spoofing Vulnerability