Known Vulnerabilities for Exchange Server by Microsoft
Listed below are 10 of the newest known vulnerabilities associated with "Exchange Server" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128087 json | russh is a Rust SSH client and server library that includes an SSH agent protocol implementation. From version 0.55.0 until v... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-126997 json | A vulnerability was identified in JeecgBoot up to 3.9.6. This affects the function RestTemplate.exchange of the file org/jeec... | Not Provided | 2026-11-12 | 2026-11-13 |
| CVE-2026-126136 json | For Exchange accounts using EWS or Microsoft Graph with OAuth2 authentication, Thunderbird sent the OAuth2 access token to th... | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-123611 json | rustls before 0.23.46 contains a key exchange downgrade vulnerability that allows network attackers to poison the per-server-... | Not Provided | 2026-11-08 | 2026-11-13 |
| CVE-2026-119703 json | xiaozhi-esp32-server through 0.9.8 contains an authentication bypass vulnerability in WebSocketServer._handle_auth that allow... | Not Provided | 2026-10-30 | 2026-11-04 |
| CVE-2026-118778 json | Forge (also called node-forge) is a native implementation of Transport Layer Security in JavaScript. Prior to 1.4.1, the affe... | Not Provided | 2026-10-29 | 2026-11-03 |
| CVE-2026-118208 json | Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network. | Not Provided | 2026-11-10 | 2026-11-12 |
| CVE-2026-118207 json | Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-118157 json | Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. | Not Provided | 2026-11-10 | 2026-11-10 |
| CVE-2026-118154 json | Reliance on untrusted inputs in a security decision in Microsoft Exchange Server allows an authorized attacker to elevate pri... | Not Provided | 2026-11-10 | 2026-11-10 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.5 | |||
| Application | Microsoft | Exchange Server | 5.0 | |||
| Application | Microsoft | Exchange Server | 5.0 | |||
| Application | Microsoft | Exchange Server | 5.0 | |||
| Application | Microsoft | Exchange Server | 5.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 4.0 | |||
| Application | Microsoft | Exchange Server | 2019 | |||
| Application | Microsoft | Exchange Server | 2019 | |||
| Application | Microsoft | Exchange Server | 2019 |