Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 284

Export CSV
CVE-2026-118208

Microsoft Exchange Server Spoofing Vulnerability

Improper access control in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118149

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper control of generation of code ('code injection') in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118150

Microsoft Exchange Server Elevation of Privilege Vulnerability

Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118153

Microsoft Exchange Server Denial of Service Vulnerability

Inefficient algorithmic complexity in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118157

Microsoft Exchange Server Elevation of Privilege Vulnerability

Weak authentication in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118207

Microsoft Exchange Server Remote Code Execution Vulnerability

Improper input validation in Microsoft Exchange Server allows an authorized attacker to execute code over a network.

CVSS 3.1 · 8.8 High EPSS 1.1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118152

Microsoft Exchange Server Spoofing Vulnerability

Cross-site request forgery (csrf) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2026-118151

Microsoft Exchange Server Elevation of Privilege Vulnerability

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

CVSS 3.1 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Microsoft
Products
Exchange Server Se
CVE-2021-27065

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 99.9% KEV · Listed
Vendors
Microsoft
Products
Exchange Server
CVE-2021-26858

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 3.1 · 7.8 High EPSS 93.7% KEV · Listed
Vendors
Microsoft
Products
Exchange Server