Vulnerabilities > Microsoft > Exchange Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2022-01-11 CVE-2022-21969 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Server Remote Code Execution Vulnerability
low complexity
microsoft
critical
9.0
2019-11-12 CVE-2019-1373 Deserialization of Untrusted Data vulnerability in Microsoft Exchange Server 2013/2016/2019
A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
network
low complexity
microsoft CWE-502
critical
9.8
2019-01-08 CVE-2019-0586 Out-of-bounds Write vulnerability in Microsoft Exchange Server 2016/2019
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
network
low complexity
microsoft CWE-787
critical
9.8
2018-08-15 CVE-2018-8302 Out-of-bounds Write vulnerability in Microsoft Exchange Server 2010/2013/2016
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
network
low complexity
microsoft CWE-787
critical
9.8
2018-05-09 CVE-2018-8154 Out-of-bounds Write vulnerability in Microsoft Exchange Server 2010/2013/2016
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
network
low complexity
microsoft CWE-787
critical
9.8