Advisories · Technology

Microsoft Exchange Server 2016 Cumulative Update 18.

Every CVE that names Microsoft Exchange Server 2016 Cumulative Update 18 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-27078 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-27065 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Path traversal
Not analysed yet 2 Mar 2021
CVE-2021-26858 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
Not analysed yet 2 Mar 2021
CVE-2021-26857 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2010 Service Pack 3
- Microsoft Exchange Server 2013 Cumulative Update 21
- Insecure deserialization
Not analysed yet 2 Mar 2021
CVE-2021-26855 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Server-side request forgery (SSRF)
Not analysed yet 2 Mar 2021
CVE-2021-26854 CVE record

CVSS 6.6 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-26412 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-24085 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 8
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 25 Feb 2021
CVE-2021-1730 CVE record

CVSS 5.4 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 7
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 25 Feb 2021
CVE-2020-17143 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17142 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17141 CVE record

CVSS 8.4 High

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 17
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 9 Dec 2020
CVE-2020-17132 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17117 CVE record

CVSS 6.6 Medium

Microsoft Exchange Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 9 Dec 2020
CVE-2020-17085 CVE record

CVSS 6.2 Medium

Microsoft Exchange Server Denial of Service Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-17084 CVE record

CVSS 8.5 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-17083 CVE record

CVSS 5.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 11 Nov 2020
CVE-2020-16969 CVE record

CVSS 7.1 High

Microsoft Exchange Information Disclosure Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 6
- Microsoft Exchange Server 2016 Cumulative Update 17
Not analysed yet 16 Oct 2020