# Microsoft Exchange Server 2019 Cumulative Update 14.

Every CVE that names Microsoft Exchange Server 2019 Cumulative Update 14 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87696.md)
  `CVE-2026-87696` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 13 Oct 2026 · Tags: Weak cryptography or TLS
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87695.md)
  `CVE-2026-87695` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: CWE-829
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-87692.md)
  `CVE-2026-87692` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 7.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Insecure deserialization
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-77910.md)
  `CVE-2026-77910` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 13 Oct 2026 · Tags: Broken access control
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-70571.md)
  `CVE-2026-70571` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.1 High · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-70279.md)
  `CVE-2026-70279` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Oct 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-96940.md)
  `CVE-2026-96940` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69641.md)
  `CVE-2026-69641` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-69382.md)
  `CVE-2026-69382` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.9 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Weak cryptography or TLS
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69380.md)
  `CVE-2026-69380` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Microsoft Exchange Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-69378.md)
  `CVE-2026-69378` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 8 Sept 2026 · Tags: Denial of service
- [Microsoft Exchange Server Tampering Vulnerability](https://agentprime.io/advisories/CVE-2026-69375.md)
  `CVE-2026-69375` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Broken access control
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-69361.md)
  `CVE-2026-69361` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-69356.md)
  `CVE-2026-69356` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-69355.md)
  `CVE-2026-69355` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Path traversal
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-55007.md)
  `CVE-2026-55007` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 and 2 more · CVSS 8.1 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62911.md)
  `CVE-2026-62911` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.0 High · Not analysed yet · Published 11 Aug 2026 · Tags: Authentication bypass
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-65813.md)
  `CVE-2026-65813` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-62915.md)
  `CVE-2026-62915` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Broken access control
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-62914.md)
  `CVE-2026-62914` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.3 High · Not analysed yet · Published 11 Aug 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-62913.md)
  `CVE-2026-62913` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 11 Aug 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-62912.md)
  `CVE-2026-62912` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 11 Aug 2026 · Tags: Insecure deserialization
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-62910.md)
  `CVE-2026-62910` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.2 High · Not analysed yet · Published 11 Aug 2026 · Tags: CWE-99
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55009.md)
  `CVE-2026-55009` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Insecure deserialization
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-55008.md)
  `CVE-2026-55008` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-55006.md)
  `CVE-2026-55006` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: CWE-1220
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-55005.md)
  `CVE-2026-55005` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 14 Jul 2026 · Tags: Memory corruption
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-47631.md)
  `CVE-2026-47631` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2026-45583.md)
  `CVE-2026-45583` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2026 · Tags: Code injection
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45504.md)
  `CVE-2026-45504` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 9 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45503.md)
  `CVE-2026-45503` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.1 High · Not analysed yet · Published 9 Jun 2026 · Tags: Broken access control
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-45502.md)
  `CVE-2026-45502` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.0 Medium · EPSS 0.20 · Not analysed yet · Published 9 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-45501.md)
  `CVE-2026-45501` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-45500.md)
  `CVE-2026-45500` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.1 Medium · Not analysed yet · Published 9 Jun 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-42897.md)
  `CVE-2026-42897` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.1 High · Critical (KEV, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.71 · Not analysed yet · Published 14 May 2026 · Tags: Cross-site scripting (XSS)
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-21527.md)
  `CVE-2026-21527` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2026 · Tags: CWE-345, CWE-451, CWE-1286
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-64666.md)
  `CVE-2025-64666` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-20
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-64667.md)
  `CVE-2025-64667` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-451
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-59248.md)
  `CVE-2025-59248` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-20
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59249.md)
  `CVE-2025-59249` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Authentication bypass
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53782.md)
  `CVE-2025-53782` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.4 High · Not analysed yet · Published 14 Oct 2025 · Tags: Authentication bypass
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-25007.md)
  `CVE-2025-25007` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-1286
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2025-25006.md)
  `CVE-2025-25006` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 5.3 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-167
- [Microsoft Exchange Server Tampering Vulnerability](https://agentprime.io/advisories/CVE-2025-25005.md)
  `CVE-2025-25005` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-20
- [Microsoft Exchange Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2025-33051.md)
  `CVE-2025-33051` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 7.5 High · Not analysed yet · Published 12 Aug 2025 · Tags: Information disclosure
- [Microsoft Exchange Server Hybrid Deployment Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-53786.md)
  `CVE-2025-53786` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 3 more · CVSS 8.0 High · Not analysed yet · Published 6 Aug 2025 · Tags: Authentication bypass
- [Microsoft Exchange Server Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2024-49040.md)
  `CVE-2024-49040` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 13 and 2 more · CVSS 7.5 High · Not analysed yet · Published 12 Nov 2024 · Tags: CWE-451
- [Microsoft Exchange Server Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2024-26198.md)
  `CVE-2024-26198` · CVE record: Microsoft Microsoft Exchange Server 2019 Cumulative Update 14 and 2 more · CVSS 8.8 High · Not analysed yet · Published 12 Mar 2024 · Tags: CWE-426
- [Microsoft Exchange Server Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2024-21410.md)
  `CVE-2024-21410` · CVE record: Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 and 2 more · CVSS 9.8 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.13 · Not analysed yet · Published 13 Feb 2024 · Tags: Authentication bypass

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=microsoft-exchange-server-2019-cumulative-update-14>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/microsoft-exchange-server-2019-cumulative-update-14/>. Everything for agents: <https://agentprime.io/llms.txt>.