Microsoft

Records18046All Threatist records

Exploited (KEV)406In CISA KEV

CVSS critical2330CVSS 9.0–10.0

CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability CRITICAL 99KEV 2026-10-27 TI-2026-73128 Microsoft Windows Command Injection Vulnerability CRITICAL 97KEV 2026-10-13 TI-2026-46806 Microsoft SharePoint Code Injection Vulnerability CRITICAL 97KEV 2026-09-25 TI-2026-56567 Microsoft Windows Link Following Vulnerability CRITICAL 93KEV 2026-09-08 TI-2026-58845 Microsoft Windows Heap-Based Buffer Overflow Vulnerability CRITICAL 93KEV 2026-09-08 TI-2019-00798 Microsoft SQL Server Remote Code Execution Vulnerability CRITICAL 97KEV 2026-08-26

Components

Products in the NVD configurations · select one to filter the records

Windows Server 2019 6456 records CRITICAL Windows Server 2016 6401 records CRITICAL Windows Server 2012 5294 records CRITICAL Windows Server 2022 4946 records CRITICAL Windows 10 1809 4017 records CRITICAL Windows 10 21h2 3968 records CRITICAL Windows 10 22h2 3967 records CRITICAL Windows Server 2025 3632 records CRITICAL

Records

259 records in Exchange Server · all components

TI-2024-14170 CVE-2024-21410 · GHSA-mv5v-r4x4-qmxw

Microsoft Exchange Server Elevation of Privilege Vulnerability

CRITICAL 100KEV

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.12661 Published 2024-02-13 Fixed in 15.01.2507.037, 15.2.1544.004 CWE-287

TI-2022-19610 CVE-2022-41080 · GHSA-2cwh-g5wf-mfh8

Microsoft Exchange Server Elevation of Privilege Vulnerability

CRITICAL 100KEV

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.77326 Published 2022-11-09 Fixed in 15.00.1497.044, 15.01.2375.037 +3

TI-2021-13547 CVE-2021-34523 · GHSA-gcrr-725q-f8jw

Microsoft Exchange Server Elevation of Privilege Vulnerability

CRITICAL 100KEV

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.9999 Published 2021-07-14 Fixed in 15.00.1497.015, 15.01.2176.012 +3

TI-2021-13502 CVE-2021-34473 · GHSA-fgq9-p33g-xcfc

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 100KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99999 Published 2021-07-14 Fixed in 15.00.1497.015, 15.01.2176.012 +3 CWE-918

TI-2021-08465 CVE-2021-26855 · GHSA-6784-2mh5-cq56

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 100KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.99996 Published 2021-03-02 Fixed in 15.00.1395.012, 15.00.1473.006 +22 CWE-918

TI-2023-07929 CVE-2023-21529 · GHSA-hjxr-gv9h-rjxc

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.59294 Published 2023-02-14 Fixed in 15.00.1497.047, 15.01.2507.021 +2 CWE-502

TI-2022-19581 CVE-2022-41040 · GHSA-6ph7-8wxv-6gf2

Microsoft Exchange Server Elevation of Privilege Vulnerability

CRITICAL 97KEV

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.99956 Published 2022-10-03 Fixed in 15.00.1497.044, 15.01.2375.037 +3 CWE-918

TI-2021-18752 CVE-2021-42321 · GHSA-3f87-66x4-f3p7

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.91737 Published 2021-11-10 Fixed in 15.01.2308.020, 15.01.2375.017 +2

TI-2020-13118 CVE-2020-17144 · GHSA-68q4-hg7f-7p9c

Microsoft Exchange Remote Code Execution Vulnerability

CRITICAL 97KEV

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.36514 Published 2020-12-09 Fixed in publication CWE-502

TI-2020-00663 CVE-2020-0688 · GHSA-4g56-8mc7-hpjq

Improper authentication in Microsoft Exchange Server 2013

CRITICAL 97KEV

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.99955 Published 2020-02-11 No fix listed CWE-287

TI-2026-31101 CVE-2026-42897 · GHSA-3c39-338m-m4vp

Microsoft Exchange Server Spoofing Vulnerability

CRITICAL 94KEV

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.70662 Published 2026-05-14 Fixed in 15.01.2507.069, 15.02.1544.041 +2 CWE-79

TI-2022-19612 CVE-2022-41082 · GHSA-cg2v-9v73-ccwp

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 94KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.9997 Published 2022-10-03 Fixed in 15.00.1497.044, 15.01.2375.037 +3 CWE-502

TI-2021-08638 CVE-2021-27065 · GHSA-rwm8-8c4x-v87q

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.99876 Published 2021-03-02 Fixed in 15.00.1395.012, 15.00.1473.006 +23 CWE-22

TI-2021-08467 CVE-2021-26858 · GHSA-r4wp-245q-vr5w

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.93651 Published 2021-03-02 Fixed in 15.00.1395.012, 15.00.1473.006 +22

TI-2021-08466 CVE-2021-26857 · GHSA-2qwq-gqpm-q83g

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 93KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.95762 Published 2021-03-02 Fixed in 14.03.0513.000, 15.00.1395.012 +24 CWE-502

TI-2017-06074 CVE-2017-8540 · GHSA-342q-x494-83vw

Out-of-bounds write in Microsoft Malware Protection Engine

CRITICAL 93KEV

The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1,…

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.71874 Published 2017-05-26 No fix listed CWE-787

TI-2018-06236 CVE-2018-8581 · GHSA-h9jh-6fmr-vvc6

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka…

CRITICAL 92KEV

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.27558 Published 2018-11-14 No fix listed

TI-2021-11415 CVE-2021-31196 · GHSA-5jv9-cff9-2j3m

Microsoft Exchange Server Remote Code Execution Vulnerability

CRITICAL 91KEV

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.54056 Published 2021-07-14 Fixed in 15.00.1497.023, 15.01.2242.012 +3

TI-2021-13138 CVE-2021-33766 · GHSA-f9f4-96j3-5mvr

Microsoft Exchange Server Information Disclosure Vulnerability

CRITICAL 90KEV

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.98176 Published 2021-07-14 Fixed in 15.00.1497.015, 15.01.2176.012 +3

TI-2021-11423 CVE-2021-31207 · GHSA-jcxv-6f65-7hrx

Microsoft Exchange Server Security Feature Bypass Vulnerability

CRITICAL 88KEV

Microsoft Exchange Server Security Feature Bypass Vulnerability

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.99782 Published 2021-05-11 Fixed in 15.00.1497.018, 15.02.0858.012 +3 CWE-434

TI-2020-13106 CVE-2020-17132 · GHSA-vqv9-x245-gqwv

Microsoft Exchange Remote Code Execution Vulnerability

HIGH 82

Microsoft Exchange Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.89897 Published 2020-12-09 Fixed in publication

TI-2023-15337 CVE-2023-32031 · GHSA-5p9r-7qr9-fhwh

Microsoft Exchange Server Remote Code Execution Vulnerability

HIGH 81

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.8145 Published 2023-06-14 Fixed in 15.02.1118.030, 15.01.2507.027 +1 CWE-502

TI-2023-08092 CVE-2023-21707 · GHSA-4g24-qfvp-36w8

Microsoft Exchange Server Remote Code Execution Vulnerability

HIGH 80

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.79583 Published 2023-02-14 Fixed in 15.00.1497.048, 15.01.2507.023 +2 CWE-502

TI-2021-09592 CVE-2021-28480 · GHSA-g7vr-3jq4-gwf3

Microsoft Exchange Server Remote Code Execution Vulnerability

HIGH 80

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.71227 Published 2021-04-13 Fixed in 15.00.1497.015, 15.01.2176.012 +3

TI-2007-00206 CVE-2007-0213 · GHSA-x698-9hf8-hpr3

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode…

HIGH 80

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail messa…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.68454 Published 2007-05-08 No fix listed CWE-20

Open these records in search →