Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
401,263CVE records
2,553Published, last 7 days
1,734In CISA KEV
1,407Critical, last 30 days
5,599Analysed
15:39 UTCLast NVD sync
Filters Show:
108 results. Microsoft Exchange Server.
Page 1 of 6| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69380 | High | 8.1 |  Microsoft Exchange Server +1 | Missing authorization | - | - | 0.69% | Sep 8, 2026 |
| CVE-2026-69378 | High | 7.5 | Microsoft Exchange Server +1 | CWE-674 | - | - | 1.2% | Sep 8, 2026 |
| CVE-2026-69355 | High | 8.8 | Microsoft Exchange Server +1 | CWE-73 | - | - | 0.91% | Sep 8, 2026 |
| CVE-2026-65813 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.94% | Aug 11, 2026 |
| CVE-2026-62913 | High | 8.8 | Microsoft Exchange Server +1 | Heap-based buffer overflow | - | - | 0.91% | Aug 11, 2026 |
| CVE-2026-62911 | High | 8.0 | Microsoft Exchange Server +1 | Authentication bypass by capture-r | - | - | 0.69% | Aug 11, 2026 |
| CVE-2026-62910 | High | 8.8 | Microsoft Exchange Server +1 | CWE-99 | - | - | 1.0% | Aug 11, 2026 |
| CVE-2026-55009 | High | 7.8 | Microsoft Exchange Server +1 | Deserialization of untrusted data | - | - | 2.5% | Jul 14, 2026 |
| CVE-2026-55006 | High | 7.8 | Microsoft Exchange Server +1 | CWE-1220 | - | - | 0.30% | Jul 14, 2026 |
| CVE-2026-55005 | High | 8.8 | Microsoft Exchange Server +1 | Heap-based buffer overflow | - | - | 1.0% | Jul 14, 2026 |
| CVE-2026-45583 | High | 8.1 | Microsoft Exchange Server +1 | Code injection | - | - | 0.70% | Jun 9, 2026 |
| CVE-2026-45504 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.78% | Jun 9, 2026 |
| CVE-2025-64666 | High | 7.5 | Microsoft Exchange Server +1 | Improper input validation | - | - | 1.0% | Dec 9, 2025 |
| CVE-2025-59249 | High | 8.8 | Microsoft Exchange Server +1 | CWE-1390 | - | - | 0.83% | Oct 14, 2025 |
| CVE-2025-59248 | High | 7.5 | Microsoft Exchange Server +1 | Improper input validation | - | - | 1.0% | Oct 14, 2025 |
| CVE-2025-53782 | High | 7.8 | Microsoft Exchange Server +1 | CWE-303 | - | - | 0.36% | Oct 14, 2025 |
| CVE-2025-33051 | High | 7.5 | Microsoft Exchange Server +1 | Information exposure | - | - | 1.3% | Aug 12, 2025 |
| CVE-2025-53786 | High | 8.0 | Microsoft Exchange Server +1 | Improper authentication | - | - | 7.7% | Aug 6, 2025 |
| CVE-2024-49040 | High | 7.5 | Microsoft Exchange Server | CWE-451 | - | - | 8.5% | Nov 12, 2024 |
| CVE-2024-26198 | High | 8.8 | Microsoft Exchange Server | Untrusted search path | - | - | 6.8% | Mar 12, 2024 |
