Advisories · Technology

Microsoft Exchange Server.

Every CVE that names Microsoft Exchange Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2019-1136 CVE record

Microsoft Exchange Server: An elevation of privilege vulnerability exists in Microsoft Exchange Server…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
Not analysed yet 29 Jul 2019
CVE-2019-1084 CVE record

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.
- Microsoft Exchange Server
- Microsoft Outlook
Not analysed yet 15 Jul 2019
CVE-2019-0858 CVE record

Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
Not analysed yet 9 Apr 2019
CVE-2019-0817 CVE record

Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
- Microsoft Exchange Server 2016
Not analysed yet 9 Apr 2019
CVE-2019-0588 CVE record

Microsoft Exchange Server: An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API…
- Microsoft Exchange Server
Not analysed yet 8 Jan 2019
CVE-2019-0586 CVE record

Microsoft Exchange Server: A remote code execution vulnerability exists in Microsoft Exchange software when the…
- Microsoft Exchange Server
Not analysed yet 8 Jan 2019
CVE-2018-8604 CVE record

Microsoft Exchange Server: A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle…
- Microsoft Exchange Server
Not analysed yet 12 Dec 2018
CVE-2018-8581 CVE record

CVSS 7.4 HighCritical · KEV, CVSS 7+ and EPSSKEV · ransomware

Microsoft Exchange Server: An elevation of privilege vulnerability exists in Microsoft Exchange Server…
- Microsoft Exchange Server
Not analysed yet 14 Nov 2018
CVE-2018-8448 CVE record

Microsoft Exchange Server: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access…
- Microsoft Exchange Server
Not analysed yet 10 Oct 2018
CVE-2018-8265 CVE record

Microsoft Exchange Server: A remote code execution vulnerability exists in the way Microsoft Exchange software…
- Microsoft Exchange Server
Not analysed yet 10 Oct 2018
CVE-2018-8374 CVE record

Microsoft Exchange Server: A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle…
- Microsoft Exchange Server
Not analysed yet 15 Aug 2018
CVE-2018-8302 CVE record

Microsoft Exchange Server: A remote code execution vulnerability exists in Microsoft Exchange software when the…
- Microsoft Exchange Server
Not analysed yet 15 Aug 2018
CVE-2018-8159 CVE record

Microsoft Exchange Server: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access…
- Microsoft Exchange Server
Not analysed yet 9 May 2018
CVE-2018-8154 CVE record

Microsoft Exchange Server: A remote code execution vulnerability exists in Microsoft Exchange software when the…
- Microsoft Exchange Server
Not analysed yet 9 May 2018
CVE-2018-8153 CVE record

Microsoft Exchange Server: A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access…
- Microsoft Exchange Server
Not analysed yet 9 May 2018
CVE-2018-8152 CVE record

Microsoft Exchange Server: An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access…
- Microsoft Exchange Server
Not analysed yet 9 May 2018
CVE-2018-8151 CVE record

Microsoft Exchange Server: An information disclosure vulnerability exists when Microsoft Exchange improperly handles…
- Microsoft Exchange Server
Not analysed yet 9 May 2018
CVE-2018-0986 CVE record

Microsoft Windows Defender: A remote code execution vulnerability exists when the Microsoft Malware Protection Engine…
- Microsoft Windows Defender
- Microsoft Windows Intune Endpoint Protection
Not analysed yet 4 Apr 2018