Microsoft Exchange Server 2016 Cumulative Update 23 vulnerabilities, page 2
88 vulnerabilities
Known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 23, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-41040microsoftexchange_server+5KEVRansomware
EPSS score99.96%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-41079microsoftexchange_server+5EPSS score0.84%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2022-41082microsoftexchange_server+5KEVRansomwareEPSS score99.97%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2022-41078microsoftexchange_server+5EPSS score0.84%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2022-41080microsoftexchange_server+5KEVRansomwareEPSS score77.33%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-24477microsoftexchange_server+5EPSS score2.24%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-24516microsoftexchange_server+5EPSS score2.38%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-30134microsoftexchange_server+5EPSS score2.02%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2022-34692microsoftexchange_server+4EPSS score1.71%
Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2024-21410microsoftexchange_server+3KEVEPSS score12.56%
Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2024-26198microsoftexchange_server+3EPSS score6.82%
Microsoft Exchange Server Remote Code Execution VulnerabilityCVE-2024-49040microsoftexchange_server+3EPSS score8.47%
Microsoft Exchange Server Spoofing VulnerabilityCVE-2026-21527microsoftexchange_server+5EPSS score8.26%
User interface (ui) misrepresentation of critical information in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.CVE-2026-55006microsoftexchange_server+5EPSS score0.30%
Insufficient granularity of access control in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.CVE-2026-55008microsoftexchange_server+5EPSS score0.86%
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.CVE-2026-55005microsoftexchange_server+5EPSS score1.01%
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.CVE-2026-55009microsoftexchange_server+5EPSS score2.51%
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.CVE-2026-65813microsoftexchange_server+5EPSS score0.94%
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.CVE-2026-62912microsoftexchange_server+5EPSS score1.98%
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.CVE-2026-62913microsoftexchange_server+5EPSS score0.91%
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.