Microsoft Exchange Server vulnerabilities
259 published vulnerabilities in Microsoft Exchange Server, 20 of them exploited in the wild. The most were published in 2026 (33), and 33 so far in 2026.
Microsoft Exchange Server vulnerabilities by year
1999
2000
2001
2002
2003
2004
2005
2006
2007
2008
2009
2010
2012
2013
2014
2015
2016
2017
2018
2019
2020
2021
2022
2023
2024
2025
2026
Most exploited Microsoft Exchange Server vulnerabilities
- CVE-2024-21410 Microsoft Exchange Server Privilege Escalation
- CVE-2021-34473 Microsoft Exchange Server Remote Code Execution
- CVE-2021-26855 Microsoft Exchange Server Remote Code Execution
- CVE-2021-34523 Microsoft Exchange Server Privilege Escalation
- CVE-2023-21529 Microsoft Exchange Server Deserialization of Untrusted Data
- CVE-2022-41080 Microsoft Exchange Server Privilege Escalation
- CVE-2022-41040 Microsoft Exchange Server Server-Side Request Forgery
- CVE-2021-42321 Microsoft Exchange Server Remote Code Execution
- CVE-2020-0688 Microsoft Exchange Server Validation Key Remote Code Execution
- CVE-2020-17144 Microsoft Exchange Server Remote Code Execution
- CVE-2026-42897 Microsoft Exchange Server Cross-Site Scripting
- CVE-2022-41082 Microsoft Exchange Server Remote Code Execution
Find these in your own software.
Upload an SBOM and sbomify checks it against every vulnerability here, every day.