Microsoft Exchange Server 2016 Cumulative Update 15 vulnerabilities

5 known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 15 from Microsoft. 5 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Microsoft Exchange Server Remote Code Execution Exploited

  CVE-2021-27065Mar 3, 2021MicrosoftEPSS 99.9%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Exchange Server Remote Code Execution Exploited

  CVE-2021-26858Mar 3, 2021MicrosoftEPSS 93.7%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 7.8 High severity

  Microsoft Exchange Server Remote Code Execution Exploited

  CVE-2021-26857Mar 3, 2021MicrosoftEPSS 95.8%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 9.8 Critical severity

  Microsoft Exchange Server Remote Code Execution Exploited

  CVE-2021-26855Mar 3, 2021MicrosoftEPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 8.8 High severity

  Microsoft Exchange Server Validation Key Remote Code Execution Exploited

  CVE-2020-0688Feb 11, 2020MicrosoftEPSS 100%

  A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.