Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (259 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2026-62911 1 Microsoft 5 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 2 more 2026-08-13 8 High
Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-62912 1 Microsoft 6 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 3 more 2026-08-13 6.5 Medium
Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
CVE-2026-62914 1 Microsoft 5 Exchange Server, Exchange Server 2016, Exchange Server 2019 and 2 more 2026-08-13 7.3 High
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-62915 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-08-13 6.5 Medium
Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-65813 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-08-12 6.5 Medium
Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-62913 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-08-12 8.8 High
Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-62910 1 Microsoft 7 Exchange Server 2016, Exchange Server 2019, Exchange Server Se and 4 more 2026-08-12 7.2 High
Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2021-34470 1 Microsoft 1 Exchange Server 2026-08-10 8 High
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-38181 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8.8 High
Microsoft Exchange Server Spoofing Vulnerability
CVE-2023-38182 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-35388 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-38185 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8.8 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-33768 1 Microsoft 1 Exchange Server 2026-08-10 8 High
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-33766 1 Microsoft 1 Exchange Server 2026-08-10 7.3 High
Microsoft Exchange Server Information Disclosure Vulnerability
CVE-2021-31206 1 Microsoft 1 Exchange Server 2026-08-10 7.6 High
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34473 1 Microsoft 1 Exchange Server 2026-08-10 9.1 Critical
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34523 1 Microsoft 1 Exchange Server 2026-08-10 9 Critical
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-35368 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 8.8 High
Microsoft Exchange Remote Code Execution Vulnerability
CVE-2023-21709 1 Microsoft 2 Exchange Server, Exchange Server 2016 2026-08-10 9.8 Critical
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-31196 1 Microsoft 1 Exchange Server 2026-08-10 7.2 High
Microsoft Exchange Server Remote Code Execution Vulnerability