Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
425,755CVE records
4,808Published, last 7 days
1,781In CISA KEV
1,396Critical, last 30 days
5,599Analysed
21:16 UTCLast NVD sync
Filters Show:
259 results. Microsoft Exchange Server.
Page 1 of 13| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-87696 | High | 7.5 |  Microsoft Exchange Server +1 | Improper verification of cryptogra | - | - | 0.42% | Oct 13, 2026 |
| CVE-2026-87695 | High | 7.8 | Microsoft Exchange Server +1 | Inclusion from untrusted sphere | - | - | 0.29% | Oct 13, 2026 |
| CVE-2026-87692 | High | 7.8 | Microsoft Exchange Server +1 | Deserialization of untrusted data | - | - | 2.3% | Oct 13, 2026 |
| CVE-2026-96940 | High | 8.8 | Microsoft Exchange Server +1 | CWE-1390 | - | - | 2.7% | Oct 2, 2026 |
| CVE-2026-69641 | Critical | 9.1 | Microsoft Exchange Server +1 | Missing authorization | - | - | 0.86% | Sep 8, 2026 |
| CVE-2026-69382 | Medium | 5.9 | Microsoft Exchange Server +1 | Broken cryptographic algorithm | - | - | 0.47% | Sep 8, 2026 |
| CVE-2026-69380 | High | 8.1 | Microsoft Exchange Server +1 | Missing authorization | - | - | 0.69% | Sep 8, 2026 |
| CVE-2026-69378 | High | 7.5 | Microsoft Exchange Server +1 | CWE-674 | - | - | 1.2% | Sep 8, 2026 |
| CVE-2026-69375 | Medium | 6.5 | Microsoft Exchange Server +1 | Insecure direct object reference | - | - | 0.64% | Sep 8, 2026 |
| CVE-2026-69361 | Medium | 6.5 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.84% | Sep 8, 2026 |
| CVE-2026-69356 | Critical | 9.3 | Microsoft Exchange Server +1 | Cross-site scripting | - | - | 0.76% | Sep 8, 2026 |
| CVE-2026-69355 | High | 8.8 | Microsoft Exchange Server +1 | CWE-73 | - | - | 0.91% | Sep 8, 2026 |
| CVE-2026-55007 | High | 8.1 | Microsoft Exchange Server +1 | Double free | - | - | 0.71% | Sep 8, 2026 |
| CVE-2026-65813 | High | 8.8 | Microsoft Exchange Server +1 | Server-side request forgery (SSRF) | - | - | 0.94% | Aug 11, 2026 |
| CVE-2026-62915 | Medium | 6.5 | Microsoft Exchange Server +1 | Missing authorization | - | - | 0.64% | Aug 11, 2026 |
| CVE-2026-62914 | Medium | 5.4 | Microsoft Exchange Server +1 | Cross-site scripting | - | - | 0.45% | Aug 11, 2026 |
| CVE-2026-62913 | High | 8.8 | Microsoft Exchange Server +1 | Heap-based buffer overflow | - | - | 0.91% | Aug 11, 2026 |
| CVE-2026-62912 | Medium | 6.5 | Microsoft Exchange Server +1 | Deserialization of untrusted data | - | - | 2.0% | Aug 11, 2026 |
| CVE-2026-62911 | High | 8.0 | Microsoft Exchange Server +1 | Authentication bypass by capture-r | - | - | 0.69% | Aug 11, 2026 |
| CVE-2026-62910 | High | 8.8 | Microsoft Exchange Server +1 | CWE-99 | - | - | 1.0% | Aug 11, 2026 |
