Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
398,770CVE records
2,956Published, last 7 days
1,728In CISA KEV
1,430Critical, last 30 days
5,599Analysed
18:29 UTCLast NVD sync
Filters Show:
247 results. Microsoft Exchange Server.
Page 1 of 13| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-69641 | Critical | 9.1 |  Microsoft Exchange Server +1 | Missing authorization | — | — | 0.86% | Sep 8, 2026 |
| CVE-2026-65813 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | — | — | 0.94% | Aug 11, 2026 |
| CVE-2026-62915 | Medium | 6.5 | Microsoft Exchange Server +1 | Missing authorization | — | — | 0.64% | Aug 11, 2026 |
| CVE-2026-62914 | Medium | 5.4 | Microsoft Exchange Server +1 | Cross-site scripting | — | — | 0.45% | Aug 11, 2026 |
| CVE-2026-62913 | High | 8.8 | Microsoft Exchange Server +1 | Heap-based buffer overflow | — | — | 0.91% | Aug 11, 2026 |
| CVE-2026-62912 | Medium | 6.5 | Microsoft Exchange Server +1 | Deserialization of untrusted data | — | — | 2.0% | Aug 11, 2026 |
| CVE-2026-62911 | High | 8.0 | Microsoft Exchange Server +1 | Authentication bypass by capture-r | — | — | 0.69% | Aug 11, 2026 |
| CVE-2026-62910 | High | 8.8 | Microsoft Exchange Server +1 | CWE-99 | — | — | 1.0% | Aug 11, 2026 |
| CVE-2026-55009 | High | 7.8 | Microsoft Exchange Server +1 | Deserialization of untrusted data | — | — | 2.5% | Jul 14, 2026 |
| CVE-2026-55008 | Critical | 9.6 | Microsoft Exchange Server +1 | Cross-site scripting | — | — | 0.86% | Jul 14, 2026 |
| CVE-2026-55006 | High | 7.8 | Microsoft Exchange Server +1 | CWE-1220 | — | — | 0.30% | Jul 14, 2026 |
| CVE-2026-55005 | High | 8.8 | Microsoft Exchange Server +1 | Heap-based buffer overflow | — | — | 1.0% | Jul 14, 2026 |
| CVE-2026-47631 | Medium | 5.4 | Microsoft Exchange Server +1 | Cross-site scripting | — | — | 0.47% | Jun 9, 2026 |
| CVE-2026-45583 | High | 8.1 | Microsoft Exchange Server +1 | Code injection | — | — | 0.70% | Jun 9, 2026 |
| CVE-2026-45504 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | — | — | 0.78% | Jun 9, 2026 |
| CVE-2026-45503 | Medium | 6.5 | Microsoft Exchange Server +1 | Improper authorization | — | — | 0.86% | Jun 9, 2026 |
| CVE-2026-45502 | Medium | 5.0 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | — | — | 0.64% | Jun 9, 2026 |
| CVE-2026-45501 | Medium | 6.1 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | — | — | 0.46% | Jun 9, 2026 |
| CVE-2026-45500 | Medium | 6.1 | Microsoft Exchange Server +1 | Cross-site scripting | — | — | 0.41% | Jun 9, 2026 |
| CVE-2026-42897 | Medium | 6.1 | Microsoft Exchange Server +1 | Cross-site scripting | Listed | Confirmed | 0.52% | May 14, 2026 |
