Exchange Server 15.01 vulnerabilities
4 advisories affect Microsoft Exchange Server 15.01, 4 already exploited by attackers. Latest: May 15, 2026.
Running Exchange Server 15.01 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Exchange Server 15.01 alerts
Turn on Exchange Server 15.01 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Microsoft Exchange Server Cross-Site Scripting Vulnerability CVE-2026-42897 · May 15, 2026 | High 8.1 Exploited | from 15.01.0.0 to 15.01.2507.069 (excluded) Fixed in 15.01.2507.069 |
| Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability CVE-2023-21529 · April 13, 2026 | High 8.8 Exploited | from 15.01.0 to 15.01.2507.021 (excluded) Fixed in 15.01.2507.021 |
| Microsoft Exchange Server Information Disclosure Vulnerability CVE-2021-31196 · August 21, 2024 | High 7.2 Exploited | from 15.01.0 to 15.01.2242.012 (excluded); from 15.01.0 to 15.01.2308.014 (excluded) Fixed in 15.01.2242.012, 15.01.2308.014 |
| Microsoft Exchange Server Privilege Escalation Vulnerability CVE-2024-21410 · February 15, 2024 | Critical 9.8 Exploited | from 15.01.0 to 15.01.2507.037 (excluded) Fixed in 15.01.2507.037 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.