Advisories · Technology

Microsoft Exchange Server 2016 Cumulative Update 19.

Every CVE that names Microsoft Exchange Server 2016 Cumulative Update 19 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-34523 CVE record

CVSS 9.0 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Elevation of Privilege Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-34473 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
- Server-side request forgery (SSRF)
Not analysed yet 14 Jul 2021
CVE-2021-33766 CVE record

CVSS 7.3 HighCritical · KEV, CVSS 7+ and EPSSKEV

Microsoft Exchange Server Information Disclosure Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 14 Jul 2021
CVE-2021-31209 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-31207 CVE record

CVSS 6.6 MediumCritical · KEVKEV · ransomware

Microsoft Exchange Server Security Feature Bypass Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2019 Cumulative Update 9
- Unrestricted file upload
Not analysed yet 11 May 2021
CVE-2021-31198 CVE record

CVSS 7.8 High

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
- Code injection
Not analysed yet 11 May 2021
CVE-2021-31195 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2016 Cumulative Update 19
- Microsoft Exchange Server 2019 Cumulative Update 8
- Authentication bypass
Not analysed yet 11 May 2021
CVE-2021-28483 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28482 CVE record

CVSS 8.8 HighCritical · CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28481 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 9
- Microsoft Exchange Server 2016 Cumulative Update 20
Not analysed yet 13 Apr 2021
CVE-2021-28480 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 13 Apr 2021
CVE-2021-27078 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-27065 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Path traversal
Not analysed yet 2 Mar 2021
CVE-2021-26858 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
Not analysed yet 2 Mar 2021
CVE-2021-26857 CVE record

CVSS 7.8 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2010 Service Pack 3
- Microsoft Exchange Server 2013 Cumulative Update 21
- Insecure deserialization
Not analysed yet 2 Mar 2021
CVE-2021-26855 CVE record

CVSS 9.1 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 21
- Microsoft Exchange Server 2013 Cumulative Update 22
- Server-side request forgery (SSRF)
Not analysed yet 2 Mar 2021
CVE-2021-26854 CVE record

CVSS 6.6 Medium

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-26412 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Microsoft Exchange Server Remote Code Execution Vulnerability
- Microsoft Exchange Server 2013 Cumulative Update 23
- Microsoft Exchange Server 2016 Cumulative Update 18
Not analysed yet 2 Mar 2021
CVE-2021-24085 CVE record

CVSS 6.5 Medium

Microsoft Exchange Server Spoofing Vulnerability
- Microsoft Exchange Server 2019 Cumulative Update 8
- Microsoft Exchange Server 2016 Cumulative Update 19
Not analysed yet 25 Feb 2021