Exploited Vulnerabilities DailyMicrosoft Exchange Server: known exploited vulnerabilities
Entries17
Ransomware-linked13
First added2021-11-03
Latest2026-04-13
EPSS compared
99.9%
99.9%
99.9%
99.9%
99.9%
99.9%
99.8%
99.7%
98.1%
95.7%
93.6%
77.3%
59.2%
54.0%
36.5%
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2023-21529 | Microsoft Exchange Server | 2026-04-13 | 59.2% | Known |
| CVE-2021-31196 | Microsoft Exchange Server | 2024-08-21 | 54.0% | Unknown |
| CVE-2024-21410 | Microsoft Exchange Server | 2024-02-15 | 12.5% | Unknown |
| CVE-2022-41080 | Microsoft Exchange Server | 2023-01-10 | 77.3% | Known |
| CVE-2022-41082 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2022-41040 | Microsoft Exchange Server | 2022-09-30 | 99.9% | Known |
| CVE-2018-8581 | Microsoft Exchange Server | 2022-03-03 | 27.3% | Known |
| CVE-2021-33766 | Microsoft Exchange Server | 2022-01-18 | 98.1% | Unknown |
| CVE-2021-34523 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-34473 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2021-31207 | Microsoft Exchange Server | 2021-11-03 | 99.7% | Known |
| CVE-2021-27065 | Microsoft Exchange Server | 2021-11-03 | 99.8% | Known |
| CVE-2021-26858 | Microsoft Exchange Server | 2021-11-03 | 93.6% | Known |
| CVE-2021-26857 | Microsoft Exchange Server | 2021-11-03 | 95.7% | Known |
| CVE-2021-26855 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
| CVE-2020-17144 | Microsoft Exchange Server | 2021-11-03 | 36.5% | Unknown |
| CVE-2020-0688 | Microsoft Exchange Server | 2021-11-03 | 99.9% | Known |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.