CVE Daily – Microsoft Exchange https://cvedaily.com/pages/tags/msexchange.html CVE Daily – Microsoft Exchange en Wed, 03 Jun 2026 21:26:46 +0000 [High] CVE-2026-42897 – Improper neutralization of input during web page generation ('cross-site scripti... https://nvd.nist.gov/vuln/detail/CVE-2026-42897 https://nvd.nist.gov/vuln/detail/CVE-2026-42897 Thu, 14 May 2026 18:16:49 +0000 High CVE-2026-42897

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 8.1 · CWE: CWE-79

View on NVD

]]> [Critical] CVE-2026-26137 – Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized at... https://nvd.nist.gov/vuln/detail/CVE-2026-26137 https://nvd.nist.gov/vuln/detail/CVE-2026-26137 Thu, 19 Mar 2026 21:17:08 +0000 Critical CVE-2026-26137

Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.

CVSS: 9.9 · CWE: CWE-918

View on NVD

]]> [High] CVE-2025-58107 – In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on ... https://nvd.nist.gov/vuln/detail/CVE-2025-58107 https://nvd.nist.gov/vuln/detail/CVE-2025-58107 Mon, 02 Mar 2026 15:16:31 +0000 High CVE-2025-58107

In Microsoft Exchange through 2019, Exchange ActiveSync (EAS) configurations on on-premises servers may transmit sensitive data from Samsung mobile devices in cleartext, including the user's name, e-mail address, device ID, bearer token, and base64-encoded password.

CVSS: 7.5 · CWE: CWE-319

View on NVD

]]> [Medium] CVE-2026-21527 – User interface (ui) misrepresentation of critical information in Microsoft Excha... https://nvd.nist.gov/vuln/detail/CVE-2026-21527 https://nvd.nist.gov/vuln/detail/CVE-2026-21527 Tue, 10 Feb 2026 18:16:35 +0000 Medium CVE-2026-21527

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 6.5 · CWE: CWE-345

View on NVD

]]> [Medium] CVE-2025-64667 – User interface (ui) misrepresentation of critical information in Microsoft Excha... https://nvd.nist.gov/vuln/detail/CVE-2025-64667 https://nvd.nist.gov/vuln/detail/CVE-2025-64667 Tue, 09 Dec 2025 18:16:06 +0000 Medium CVE-2025-64667

User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 5.3 · CWE: CWE-451

View on NVD

]]> [High] CVE-2025-64666 – Improper input validation in Microsoft Exchange Server allows an authorized atta... https://nvd.nist.gov/vuln/detail/CVE-2025-64666 https://nvd.nist.gov/vuln/detail/CVE-2025-64666 Tue, 09 Dec 2025 18:16:05 +0000 High CVE-2025-64666

Improper input validation in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-59249 – Weak authentication in Microsoft Exchange Server allows an authorized attacker t... https://nvd.nist.gov/vuln/detail/CVE-2025-59249 https://nvd.nist.gov/vuln/detail/CVE-2025-59249 Tue, 14 Oct 2025 17:16:07 +0000 High CVE-2025-59249

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS: 8.8 · CWE: CWE-1390

View on NVD

]]> [High] CVE-2025-59248 – Improper input validation in Microsoft Exchange Server allows an unauthorized at... https://nvd.nist.gov/vuln/detail/CVE-2025-59248 https://nvd.nist.gov/vuln/detail/CVE-2025-59248 Tue, 14 Oct 2025 17:16:06 +0000 High CVE-2025-59248

Improper input validation in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 7.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2025-53782 – Incorrect implementation of authentication algorithm in Microsoft Exchange Serve... https://nvd.nist.gov/vuln/detail/CVE-2025-53782 https://nvd.nist.gov/vuln/detail/CVE-2025-53782 Tue, 14 Oct 2025 17:15:44 +0000 High CVE-2025-53782

Incorrect implementation of authentication algorithm in Microsoft Exchange Server allows an unauthorized attacker to elevate privileges locally.

CVSS: 8.4 · CWE: CWE-303

View on NVD

]]> [High] CVE-2025-33051 – Exposure of sensitive information to an unauthorized actor in Microsoft Exchange... https://nvd.nist.gov/vuln/detail/CVE-2025-33051 https://nvd.nist.gov/vuln/detail/CVE-2025-33051 Tue, 12 Aug 2025 18:15:28 +0000 High CVE-2025-33051

Exposure of sensitive information to an unauthorized actor in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.

CVSS: 7.5 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2025-25007 – Improper validation of syntactic correctness of input in Microsoft Exchange Serv... https://nvd.nist.gov/vuln/detail/CVE-2025-25007 https://nvd.nist.gov/vuln/detail/CVE-2025-25007 Tue, 12 Aug 2025 18:15:27 +0000 Medium CVE-2025-25007

Improper validation of syntactic correctness of input in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 5.3 · CWE: CWE-1286

View on NVD

]]> [Medium] CVE-2025-25006 – Improper handling of additional special element in Microsoft Exchange Server all... https://nvd.nist.gov/vuln/detail/CVE-2025-25006 https://nvd.nist.gov/vuln/detail/CVE-2025-25006 Tue, 12 Aug 2025 18:15:27 +0000 Medium CVE-2025-25006

Improper handling of additional special element in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS: 5.3 · CWE: CWE-167

View on NVD

]]> [Medium] CVE-2025-25005 – Improper input validation in Microsoft Exchange Server allows an authorized atta... https://nvd.nist.gov/vuln/detail/CVE-2025-25005 https://nvd.nist.gov/vuln/detail/CVE-2025-25005 Tue, 12 Aug 2025 18:15:27 +0000 Medium CVE-2025-25005

Improper input validation in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.

CVSS: 6.5 · CWE: CWE-20

View on NVD

]]> [High] CVE-2024-49040 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-49040 https://nvd.nist.gov/vuln/detail/CVE-2024-49040 Tue, 12 Nov 2024 18:15:44 +0000 High CVE-2024-49040

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 7.5 · CWE: CWE-451

View on NVD

]]> [High] CVE-2024-26198 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-26198 https://nvd.nist.gov/vuln/detail/CVE-2024-26198 Tue, 12 Mar 2024 17:15:58 +0000 High CVE-2024-26198

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-426

View on NVD

]]> [Critical] CVE-2024-21410 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2024-21410 https://nvd.nist.gov/vuln/detail/CVE-2024-21410 Tue, 13 Feb 2024 18:15:59 +0000 Critical CVE-2024-21410

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-287

View on NVD

]]> [High] CVE-2023-36439 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36439 https://nvd.nist.gov/vuln/detail/CVE-2023-36439 Tue, 14 Nov 2023 18:15:47 +0000 High CVE-2023-36439

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36050 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36050 https://nvd.nist.gov/vuln/detail/CVE-2023-36050 Tue, 14 Nov 2023 18:15:36 +0000 High CVE-2023-36050

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36039 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36039 https://nvd.nist.gov/vuln/detail/CVE-2023-36039 Tue, 14 Nov 2023 18:15:33 +0000 High CVE-2023-36039

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36035 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36035 https://nvd.nist.gov/vuln/detail/CVE-2023-36035 Tue, 14 Nov 2023 18:15:32 +0000 High CVE-2023-36035

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36778 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36778 https://nvd.nist.gov/vuln/detail/CVE-2023-36778 Tue, 10 Oct 2023 18:15:17 +0000 High CVE-2023-36778

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-426

View on NVD

]]> [Medium] CVE-2023-36777 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36777 https://nvd.nist.gov/vuln/detail/CVE-2023-36777 Tue, 12 Sep 2023 17:15:14 +0000 Medium CVE-2023-36777

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 5.7 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36757 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36757 https://nvd.nist.gov/vuln/detail/CVE-2023-36757 Tue, 12 Sep 2023 17:15:11 +0000 High CVE-2023-36757

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36756 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36756 https://nvd.nist.gov/vuln/detail/CVE-2023-36756 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36756

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36745 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36745 https://nvd.nist.gov/vuln/detail/CVE-2023-36745 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36745

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-36744 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-36744 https://nvd.nist.gov/vuln/detail/CVE-2023-36744 Tue, 12 Sep 2023 17:15:10 +0000 High CVE-2023-36744

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-38185 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38185 https://nvd.nist.gov/vuln/detail/CVE-2023-38185 Tue, 08 Aug 2023 18:15:23 +0000 High CVE-2023-38185

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-23

View on NVD

]]> [High] CVE-2023-38182 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38182 https://nvd.nist.gov/vuln/detail/CVE-2023-38182 Tue, 08 Aug 2023 18:15:22 +0000 High CVE-2023-38182

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-38181 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-38181 https://nvd.nist.gov/vuln/detail/CVE-2023-38181 Tue, 08 Aug 2023 18:15:22 +0000 High CVE-2023-38181

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-35388 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-35388 https://nvd.nist.gov/vuln/detail/CVE-2023-35388 Tue, 08 Aug 2023 18:15:13 +0000 High CVE-2023-35388

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-35368 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-35368 https://nvd.nist.gov/vuln/detail/CVE-2023-35368 Tue, 08 Aug 2023 18:15:12 +0000 High CVE-2023-35368

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2023-21709 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21709 https://nvd.nist.gov/vuln/detail/CVE-2023-21709 Tue, 08 Aug 2023 18:15:11 +0000 Critical CVE-2023-21709

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.8 · CWE: CWE-307

View on NVD

]]> [High] CVE-2023-32031 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-32031 https://nvd.nist.gov/vuln/detail/CVE-2023-32031 Wed, 14 Jun 2023 15:15:10 +0000 High CVE-2023-32031

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-28310 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-28310 https://nvd.nist.gov/vuln/detail/CVE-2023-28310 Wed, 14 Jun 2023 15:15:09 +0000 High CVE-2023-28310

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21710 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21710 https://nvd.nist.gov/vuln/detail/CVE-2023-21710 Tue, 14 Feb 2023 20:15:14 +0000 High CVE-2023-21710

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21707 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21707 https://nvd.nist.gov/vuln/detail/CVE-2023-21707 Tue, 14 Feb 2023 20:15:13 +0000 High CVE-2023-21707

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21706 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21706 https://nvd.nist.gov/vuln/detail/CVE-2023-21706 Tue, 14 Feb 2023 20:15:13 +0000 High CVE-2023-21706

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21529 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21529 https://nvd.nist.gov/vuln/detail/CVE-2023-21529 Tue, 14 Feb 2023 20:15:11 +0000 High CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21764 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21764 https://nvd.nist.gov/vuln/detail/CVE-2023-21764 Tue, 10 Jan 2023 22:15:19 +0000 High CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: CWE-426

View on NVD

]]> [High] CVE-2023-21763 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21763 https://nvd.nist.gov/vuln/detail/CVE-2023-21763 Tue, 10 Jan 2023 22:15:19 +0000 High CVE-2023-21763

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: CWE-426

View on NVD

]]> [High] CVE-2023-21762 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21762 https://nvd.nist.gov/vuln/detail/CVE-2023-21762 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21762

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2023-21761 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21761 https://nvd.nist.gov/vuln/detail/CVE-2023-21761 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21761

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 7.5 · CWE: CWE-918

View on NVD

]]> [High] CVE-2023-21745 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2023-21745 https://nvd.nist.gov/vuln/detail/CVE-2023-21745 Tue, 10 Jan 2023 22:15:18 +0000 High CVE-2023-21745

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2022-41123 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41123 https://nvd.nist.gov/vuln/detail/CVE-2022-41123 Wed, 09 Nov 2022 22:15:25 +0000 High CVE-2022-41123

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41080 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41080 https://nvd.nist.gov/vuln/detail/CVE-2022-41080 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41080

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41079 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41079 https://nvd.nist.gov/vuln/detail/CVE-2022-41079 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41079

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41078 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41078 https://nvd.nist.gov/vuln/detail/CVE-2022-41078 Wed, 09 Nov 2022 22:15:21 +0000 High CVE-2022-41078

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-41082 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41082 https://nvd.nist.gov/vuln/detail/CVE-2022-41082 Mon, 03 Oct 2022 01:15:08 +0000 High CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.0 · CWE: CWE-502

View on NVD

]]> [High] CVE-2022-41040 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-41040 https://nvd.nist.gov/vuln/detail/CVE-2022-41040 Mon, 03 Oct 2022 01:15:08 +0000 High CVE-2022-41040

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.8 · CWE: CWE-918

View on NVD

]]> [Medium] CVE-2022-34692 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-34692 https://nvd.nist.gov/vuln/detail/CVE-2022-34692 Tue, 09 Aug 2022 20:15:10 +0000 Medium CVE-2022-34692

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 5.3 · CWE: CWE-200

View on NVD

]]> [Medium] CVE-2022-30134 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-30134 https://nvd.nist.gov/vuln/detail/CVE-2022-30134 Tue, 09 Aug 2022 20:15:09 +0000 Medium CVE-2022-30134

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [High] CVE-2022-24516 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-24516 https://nvd.nist.gov/vuln/detail/CVE-2022-24516 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-24516

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-24477 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-24477 https://nvd.nist.gov/vuln/detail/CVE-2022-24477 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-24477

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2022-21980 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21980 https://nvd.nist.gov/vuln/detail/CVE-2022-21980 Tue, 09 Aug 2022 20:15:09 +0000 High CVE-2022-21980

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [Medium] CVE-2022-21979 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21979 https://nvd.nist.gov/vuln/detail/CVE-2022-21979 Tue, 09 Aug 2022 20:15:09 +0000 Medium CVE-2022-21979

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 4.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-37851 – Local privilege escalation in Windows products of ESET allows user who is logged... https://nvd.nist.gov/vuln/detail/CVE-2021-37851 https://nvd.nist.gov/vuln/detail/CVE-2021-37851 Wed, 11 May 2022 15:15:08 +0000 High CVE-2021-37851

Local privilege escalation in Windows products of ESET allows user who is logged into the system to exploit repair feature of the installer to run malicious code with higher privileges. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Prem…

CVSS: 7.3 · CWE: CWE-280

View on NVD

]]> [High] CVE-2022-21978 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21978 https://nvd.nist.gov/vuln/detail/CVE-2022-21978 Tue, 10 May 2022 21:15:09 +0000 High CVE-2022-21978

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.2 · CWE: N/A

View on NVD

]]> [High] CVE-2022-27167 – Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. all... https://nvd.nist.gov/vuln/detail/CVE-2022-27167 https://nvd.nist.gov/vuln/detail/CVE-2022-27167 Tue, 10 May 2022 20:15:09 +0000 High CVE-2022-27167

Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11…

CVSS: 7.1 · CWE: CWE-280

View on NVD

]]> [Medium] CVE-2022-24463 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-24463 https://nvd.nist.gov/vuln/detail/CVE-2022-24463 Wed, 09 Mar 2022 17:15:14 +0000 Medium CVE-2022-24463

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [High] CVE-2022-23277 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-23277 https://nvd.nist.gov/vuln/detail/CVE-2022-23277 Wed, 09 Mar 2022 17:15:11 +0000 High CVE-2022-23277

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2022-26336 – A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attac... https://nvd.nist.gov/vuln/detail/CVE-2022-26336 https://nvd.nist.gov/vuln/detail/CVE-2022-26336 Fri, 04 Mar 2022 16:15:10 +0000 Medium CVE-2022-26336

A shortcoming in the HMEF package of poi-scratchpad (Apache POI) allows an attacker to cause an Out of Memory exception. This package is used to read TNEF files (Microsoft Outlook and Microsoft Exchange Server). If an application uses poi-scratchpad to parse TNEF files and the application allows untrusted users to supply them, then a carefully crafted file can cause an Out of Memory exception. Th…

CVSS: 5.5 · CWE: CWE-20

View on NVD

]]> [Critical] CVE-2022-21969 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21969 https://nvd.nist.gov/vuln/detail/CVE-2022-21969 Tue, 11 Jan 2022 21:15:14 +0000 Critical CVE-2022-21969

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2022-21855 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21855 https://nvd.nist.gov/vuln/detail/CVE-2022-21855 Tue, 11 Jan 2022 21:15:10 +0000 Critical CVE-2022-21855

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2022-21846 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2022-21846 https://nvd.nist.gov/vuln/detail/CVE-2022-21846 Tue, 11 Jan 2022 21:15:09 +0000 Critical CVE-2022-21846

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-42321 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-42321 https://nvd.nist.gov/vuln/detail/CVE-2021-42321 Wed, 10 Nov 2021 01:19:50 +0000 High CVE-2021-42321

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-42305 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-42305 https://nvd.nist.gov/vuln/detail/CVE-2021-42305 Wed, 10 Nov 2021 01:19:49 +0000 Medium CVE-2021-42305

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-41349 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-41349 https://nvd.nist.gov/vuln/detail/CVE-2021-41349 Wed, 10 Nov 2021 01:19:28 +0000 Medium CVE-2021-41349

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-41350 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-41350 https://nvd.nist.gov/vuln/detail/CVE-2021-41350 Wed, 13 Oct 2021 01:15:13 +0000 Medium CVE-2021-41350

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [High] CVE-2021-41348 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-41348 https://nvd.nist.gov/vuln/detail/CVE-2021-41348 Wed, 13 Oct 2021 01:15:13 +0000 High CVE-2021-41348

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: CWE-269

View on NVD

]]> [High] CVE-2021-34453 – Microsoft Exchange Server Denial of Service Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34453 https://nvd.nist.gov/vuln/detail/CVE-2021-34453 Wed, 13 Oct 2021 01:15:09 +0000 High CVE-2021-34453

Microsoft Exchange Server Denial of Service Vulnerability

CVSS: 7.5 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-26427 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26427 https://nvd.nist.gov/vuln/detail/CVE-2021-26427 Wed, 13 Oct 2021 01:15:09 +0000 Critical CVE-2021-26427

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-34523 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34523 https://nvd.nist.gov/vuln/detail/CVE-2021-34523 Wed, 14 Jul 2021 18:15:12 +0000 Critical CVE-2021-34523

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-34473 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34473 https://nvd.nist.gov/vuln/detail/CVE-2021-34473 Wed, 14 Jul 2021 18:15:11 +0000 Critical CVE-2021-34473

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: CWE-918

View on NVD

]]> [High] CVE-2021-34470 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-34470 https://nvd.nist.gov/vuln/detail/CVE-2021-34470 Wed, 14 Jul 2021 18:15:11 +0000 High CVE-2021-34470

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-33768 – Microsoft Exchange Server Elevation of Privilege Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-33768 https://nvd.nist.gov/vuln/detail/CVE-2021-33768 Wed, 14 Jul 2021 18:15:10 +0000 High CVE-2021-33768

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS: 8.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-33766 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-33766 https://nvd.nist.gov/vuln/detail/CVE-2021-33766 Wed, 14 Jul 2021 18:15:10 +0000 High CVE-2021-33766

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 7.3 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31206 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31206 https://nvd.nist.gov/vuln/detail/CVE-2021-31206 Wed, 14 Jul 2021 18:15:09 +0000 High CVE-2021-31206

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.6 · CWE: N/A

View on NVD

]]> [High] CVE-2021-31196 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31196 https://nvd.nist.gov/vuln/detail/CVE-2021-31196 Wed, 14 Jul 2021 18:15:09 +0000 High CVE-2021-31196

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.2 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-31209 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31209 https://nvd.nist.gov/vuln/detail/CVE-2021-31209 Tue, 11 May 2021 19:15:10 +0000 Medium CVE-2021-31209

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: CWE-290

View on NVD

]]> [Medium] CVE-2021-31207 – Microsoft Exchange Server Security Feature Bypass Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31207 https://nvd.nist.gov/vuln/detail/CVE-2021-31207 Tue, 11 May 2021 19:15:10 +0000 Medium CVE-2021-31207

Microsoft Exchange Server Security Feature Bypass Vulnerability

CVSS: 6.6 · CWE: CWE-434

View on NVD

]]> [High] CVE-2021-31198 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31198 https://nvd.nist.gov/vuln/detail/CVE-2021-31198 Tue, 11 May 2021 19:15:10 +0000 High CVE-2021-31198

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-20

View on NVD

]]> [Medium] CVE-2021-31195 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-31195 https://nvd.nist.gov/vuln/detail/CVE-2021-31195 Tue, 11 May 2021 19:15:10 +0000 Medium CVE-2021-31195

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 6.5 · CWE: CWE-290

View on NVD

]]> [Critical] CVE-2021-28483 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28483 https://nvd.nist.gov/vuln/detail/CVE-2021-28483 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28483

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.0 · CWE: N/A

View on NVD

]]> [High] CVE-2021-28482 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28482 https://nvd.nist.gov/vuln/detail/CVE-2021-28482 Tue, 13 Apr 2021 20:15:21 +0000 High CVE-2021-28482

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-28481 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28481 https://nvd.nist.gov/vuln/detail/CVE-2021-28481 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28481

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-28480 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-28480 https://nvd.nist.gov/vuln/detail/CVE-2021-28480 Tue, 13 Apr 2021 20:15:21 +0000 Critical CVE-2021-28480

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-27078 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-27078 https://nvd.nist.gov/vuln/detail/CVE-2021-27078 Wed, 03 Mar 2021 00:15:12 +0000 Critical CVE-2021-27078

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2021-27065 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-27065 https://nvd.nist.gov/vuln/detail/CVE-2021-27065 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-27065

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-22

View on NVD

]]> [High] CVE-2021-26858 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26858 https://nvd.nist.gov/vuln/detail/CVE-2021-26858 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-26858

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: N/A

View on NVD

]]> [High] CVE-2021-26857 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26857 https://nvd.nist.gov/vuln/detail/CVE-2021-26857 Wed, 03 Mar 2021 00:15:12 +0000 High CVE-2021-26857

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 7.8 · CWE: CWE-502

View on NVD

]]> [Critical] CVE-2021-26855 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26855 https://nvd.nist.gov/vuln/detail/CVE-2021-26855 Wed, 03 Mar 2021 00:15:12 +0000 Critical CVE-2021-26855

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: CWE-918

View on NVD

]]> [Medium] CVE-2021-26854 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26854 https://nvd.nist.gov/vuln/detail/CVE-2021-26854 Wed, 03 Mar 2021 00:15:12 +0000 Medium CVE-2021-26854

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 6.6 · CWE: N/A

View on NVD

]]> [Critical] CVE-2021-26412 – Microsoft Exchange Server Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-26412 https://nvd.nist.gov/vuln/detail/CVE-2021-26412 Wed, 03 Mar 2021 00:15:11 +0000 Critical CVE-2021-26412

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-24085 – Microsoft Exchange Server Spoofing Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2021-24085 https://nvd.nist.gov/vuln/detail/CVE-2021-24085 Thu, 25 Feb 2021 23:15:15 +0000 Medium CVE-2021-24085

Microsoft Exchange Server Spoofing Vulnerability

CVSS: 6.5 · CWE: N/A

View on NVD

]]> [Medium] CVE-2021-1730 – <p>A spoofing vulnerability exists in Microsoft Exchange Server which could resu... https://nvd.nist.gov/vuln/detail/CVE-2021-1730 https://nvd.nist.gov/vuln/detail/CVE-2021-1730 Thu, 25 Feb 2021 23:15:13 +0000 Medium CVE-2021-1730

A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.

This update addresses this vulnerability.

To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to p…

CVSS: 5.4 · CWE: N/A

View on NVD

]]> [Medium] CVE-2020-26941 – A local (authenticated) low-privileged user can exploit a behavior in an ESET in... https://nvd.nist.gov/vuln/detail/CVE-2020-26941 https://nvd.nist.gov/vuln/detail/CVE-2020-26941 Tue, 26 Jan 2021 18:15:45 +0000 Medium CVE-2020-26941

A local (authenticated) low-privileged user can exploit a behavior in an ESET installer to achieve arbitrary file overwrite (deletion) of any file via a symlink, due to insecure permissions. The possibility of exploiting this vulnerability is limited and can only take place during the installation phase of ESET products. Furthermore, exploitation can only succeed when Self-Defense is disabled. Af…

CVSS: 5.5 · CWE: CWE-276

View on NVD

]]> [High] CVE-2020-17144 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17144 https://nvd.nist.gov/vuln/detail/CVE-2020-17144 Thu, 10 Dec 2020 00:15:16 +0000 High CVE-2020-17144

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.4 · CWE: CWE-502

View on NVD

]]> [High] CVE-2020-17143 – Microsoft Exchange Server Information Disclosure Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17143 https://nvd.nist.gov/vuln/detail/CVE-2020-17143 Thu, 10 Dec 2020 00:15:16 +0000 High CVE-2020-17143

Microsoft Exchange Server Information Disclosure Vulnerability

CVSS: 8.8 · CWE: N/A

View on NVD

]]> [Critical] CVE-2020-17142 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17142 https://nvd.nist.gov/vuln/detail/CVE-2020-17142 Thu, 10 Dec 2020 00:15:15 +0000 Critical CVE-2020-17142

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 9.1 · CWE: N/A

View on NVD

]]> [High] CVE-2020-17141 – Microsoft Exchange Remote Code Execution Vulnerability https://nvd.nist.gov/vuln/detail/CVE-2020-17141 https://nvd.nist.gov/vuln/detail/CVE-2020-17141 Thu, 10 Dec 2020 00:15:15 +0000 High CVE-2020-17141

Microsoft Exchange Remote Code Execution Vulnerability

CVSS: 8.4 · CWE: N/A

View on NVD

]]>