# Microsoft Exchange Server


- [CVE-2024-21410](https://insights.sbomify.com/CVE-2024-21410/): Microsoft Exchange Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2021-34473](https://insights.sbomify.com/CVE-2021-34473/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-26855](https://insights.sbomify.com/CVE-2021-26855/): Microsoft Exchange Server Remote Code Execution (critical 9.1, exploited in the wild)
- [CVE-2021-34523](https://insights.sbomify.com/CVE-2021-34523/): Microsoft Exchange Server Privilege Escalation (critical 9.0, exploited in the wild)
- [CVE-2023-21529](https://insights.sbomify.com/CVE-2023-21529/): Microsoft Exchange Server Deserialization of Untrusted Data (high 8.8, exploited in the wild)
- [CVE-2022-41080](https://insights.sbomify.com/CVE-2022-41080/): Microsoft Exchange Server Privilege Escalation (high 8.8, exploited in the wild)
- [CVE-2022-41040](https://insights.sbomify.com/CVE-2022-41040/): Microsoft Exchange Server Server-Side Request Forgery (high 8.8, exploited in the wild)
- [CVE-2021-42321](https://insights.sbomify.com/CVE-2021-42321/): Microsoft Exchange Server Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-0688](https://insights.sbomify.com/CVE-2020-0688/): Microsoft Exchange Server Validation Key Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2020-17144](https://insights.sbomify.com/CVE-2020-17144/): Microsoft Exchange Server Remote Code Execution (high 8.4, exploited in the wild)
- [CVE-2026-42897](https://insights.sbomify.com/CVE-2026-42897/): Microsoft Exchange Server Cross-Site Scripting (high 8.1, exploited in the wild)
- [CVE-2022-41082](https://insights.sbomify.com/CVE-2022-41082/): Microsoft Exchange Server Remote Code Execution (high 8.0, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/microsoft/exchange-server/