Microsoft Exchange Server 2016 Cumulative Update 20 vulnerabilities

5 known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 20 from Microsoft. 4 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Microsoft Exchange Server Privilege Escalation Exploited

  CVE-2021-34523Jul 14, 2021MicrosoftEPSS 100%

  Microsoft Exchange Server Elevation of Privilege Vulnerability

• 9.8 Critical severity

  Microsoft Exchange Server Remote Code Execution Exploited

  CVE-2021-34473Jul 14, 2021MicrosoftEPSS 100%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 7.5 High severity

  Microsoft Exchange Server Information Disclosure Exploited

  CVE-2021-33766Jul 14, 2021MicrosoftEPSS 98.2%

  Microsoft Exchange Server Information Disclosure Vulnerability

• 7.2 High severity

  Microsoft Exchange Server Information Disclosure Exploited

  CVE-2021-31196Jul 14, 2021MicrosoftEPSS 54.1%

  Microsoft Exchange Server Remote Code Execution Vulnerability

• 6.6 Medium severity

  Microsoft Exchange Server Security Feature Bypass Exploited

  CVE-2021-31207May 11, 2021MicrosoftEPSS 99.8%

  Microsoft Exchange Server Security Feature Bypass Vulnerability