Microsoft Exchange Server vulnerabilities

4 advisories, 4 actively exploited. Last update: May 15, 2026.

Running Exchange Server devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Exchange Server alerts

CVE-2026-42897May 15, 2026High 8.1Exploited
Microsoft Exchange Server Cross-Site Scripting Vulnerability
CVE-2023-21529April 13, 2026High 8.8Exploited
Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability
CVE-2021-31196August 21, 2024High 7.2Exploited
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2024-21410February 15, 2024Critical 9.8Exploited
Microsoft Exchange Server Privilege Escalation Vulnerability