Vulnerabilities > Microsoft > Exchange Server > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-04-13 CVE-2021-28483 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Server Remote Code Execution Vulnerability
low complexity
microsoft
critical
9.0
2021-03-03 CVE-2021-26412 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Server Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.1
2021-03-03 CVE-2021-26855 Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Server Remote Code Execution Vulnerability
network
low complexity
microsoft CWE-918
critical
9.1
2021-03-03 CVE-2021-27078 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Server Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.1
2020-12-10 CVE-2020-17132 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.1
2020-12-10 CVE-2020-17142 Unspecified vulnerability in Microsoft Exchange Server 2013/2016/2019
Microsoft Exchange Remote Code Execution Vulnerability
network
low complexity
microsoft
critical
9.1
2019-03-05 CVE-2019-0724 Unspecified vulnerability in Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
network
microsoft
critical
9.3
2019-01-08 CVE-2019-0586 Out-of-bounds Write vulnerability in Microsoft Exchange Server 2016/2019
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
network
low complexity
microsoft CWE-787
critical
10.0
2018-10-10 CVE-2018-8265 Improper Input Validation vulnerability in Microsoft Exchange Server 2013/2016
A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution Vulnerability." This affects Microsoft Exchange Server.
network
microsoft CWE-20
critical
9.3
2018-08-15 CVE-2018-8302 Out-of-bounds Write vulnerability in Microsoft Exchange Server 2010/2013/2016
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
network
low complexity
microsoft CWE-787
critical
10.0