주요 제품 취약점 (43건)
"Microsoft Exchange" 관련 CVE만 표시 중 · 필터 해제 ×
| 기술 | CVE | 심각도 | 유형 | KEV | 등재일 |
|---|---|---|---|---|---|
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2024-21410 | 9.8 | CWE-287 | KEV | 2024-02-15 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-34473 | 9.1 | CWE-918 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26855 | 9.1 | CWE-918 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2021-34523 | 9.0 | — | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2023-21529 | 8.8 | CWE-502 | KEV | 2026-04-13 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2022-41080 | 8.8 | — | KEV | 2023-01-10 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Elevation of Privilege Vulnerability
|
CVE-2022-41040 | 8.8 | CWE-918 | KEV | 2022-09-30 |
|
Microsoft Exchange
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-42321 | 8.8 | — | KEV | 2021-11-17 |
|
Microsoft Exchange
Microsoft Exchange Server
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Micros…
|
CVE-2020-0688 | 8.8 | CWE-287 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Remote Code Execution Vulnerability
|
CVE-2020-17144 | 8.4 | CWE-502 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Microsoft
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-42897 | 8.1 | CWE-79 | KEV | 2026-05-15 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2022-41082 | 8.0 | CWE-502 | KEV | 2022-09-30 |
|
Microsoft Exchange
Microsoft Malware Protection Engine
The Microsoft Malware Protection Engine running on Microsoft Forefront and Microsoft Defender on Microsoft Windows Server 2008 SP2 and R2 SP1, Window…
|
CVE-2017-8540 | 7.8 | CWE-787 | KEV | 2022-03-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-27065 | 7.8 | CWE-22 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26858 | 7.8 | — | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-26857 | 7.8 | CWE-502 | KEV | 2021-11-03 |
|
Microsoft Exchange
Microsoft Exchange Server
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." Th…
|
CVE-2018-8581 | 7.4 | — | KEV | 2022-03-03 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Information Disclosure Vulnerability
|
CVE-2021-33766 | 7.3 | CWE-287 | KEV | 2022-01-18 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Remote Code Execution Vulnerability
|
CVE-2021-31196 | 7.2 | — | KEV | 2024-08-21 |
|
Microsoft Exchange
Microsoft Exchange Server
Microsoft Exchange Server Security Feature Bypass Vulnerability
|
CVE-2021-31207 | 6.6 | CWE-434 | KEV | 2021-11-03 |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-70279 | 9.3 | CWE-79 | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to …
|
CVE-2026-69356 | 9.3 | CWE-79 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69641 | 9.1 | CWE-862 | — | |
|
Microsoft Exchange
Weak authorization in Microsoft Exchange Server allows an authenticated attacker to elevate privileges over a network.
|
CVE-2026-96940 | 8.8 | CWE-1390 | — | |
|
Microsoft Exchange
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-77910 | 8.8 | CWE-863 | — | |
|
Microsoft Exchange
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
CVE-2026-69355 | 8.8 | CWE-73 | — | |
|
Microsoft Exchange
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
|
CVE-2026-62913 | 8.8 | CWE-122 | — | |
|
Microsoft Exchange
Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-70571 | 8.1 | CWE-121 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-69380 | 8.1 | CWE-862 | — | |
|
Microsoft Exchange
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.
|
CVE-2026-55007 | 8.1 | CWE-415 | — | |
|
Microsoft Exchange
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-62911 | 8.0 | CWE-294 | — | |
|
Microsoft Exchange
Inclusion of functionality from untrusted control sphere in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87695 | 7.8 | CWE-829 | — | |
|
Microsoft Exchange
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.
|
CVE-2026-87692 | 7.8 | CWE-502 | — | |
|
Microsoft Exchange
Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-87696 | 7.5 | CWE-347 | — | |
|
Microsoft Exchange
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network.
|
CVE-2026-69378 | 7.5 | CWE-674 | — | |
|
Microsoft Exchange
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to pe…
|
CVE-2026-62914 | 7.3 | CWE-79 | — | |
|
Microsoft Exchange
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over…
|
CVE-2026-62910 | 7.2 | CWE-99 | — | |
|
Microsoft Exchange
Authorization bypass through user-controlled key in Microsoft Exchange Server allows an authorized attacker to perform tampering over a network.
|
CVE-2026-69375 | 6.5 | CWE-639 | — | |
|
Microsoft Exchange
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
|
CVE-2026-69361 | 6.5 | CWE-918 | — | |
|
Microsoft Exchange
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
|
CVE-2026-65813 | 6.5 | CWE-918 | — | |
|
Microsoft Exchange
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
|
CVE-2026-62915 | 6.5 | CWE-862 | — | |
|
Microsoft Exchange
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
|
CVE-2026-62912 | 6.5 | CWE-502 | — | |
|
Microsoft Exchange
Use of a broken or risky cryptographic algorithm in Microsoft Exchange Server allows an unauthorized attacker to disclose information over a network.
|
CVE-2026-69382 | 5.9 | CWE-327 | — |