Class familyMicrosoft · Exchange Server
Microsoft Exchange Server deserialization flaws, 2020–2026
27 Exchange Server CVEs with CWE-502 weaknesses, 10 Dec 2020 to 13 Oct 2026. 5 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
1 2020’20
2 2021’21
1 2022’22
20 2023’23
2024’24
2025’25
3 2026’26
In CISA KEVNot in KEV
20201 CVE, 1 in KEV
20212 CVEs, 2 in KEV
20221 CVE, 1 in KEV
202320 CVEs, 1 in KEV
20263 CVEs
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2020-17144KEV | 10 Dec 2020 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 72.4 |
| CVE-2021-26857KEV | 3 Mar 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 86.2 |
| CVE-2021-42321KEV | 10 Nov 2021 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 83.0 |
| CVE-2022-41082KEV | 3 Oct 2022 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 78.6 |
| CVE-2023-21745 | 10 Jan 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 20.6 |
| CVE-2023-21762 | 10 Jan 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 20.7 |
| CVE-2023-21529KEV | 14 Feb 2023 | Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability | Grouped by weakness | 79.0 |
| CVE-2023-21706 | 14 Feb 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 24.3 |
| CVE-2023-21707 | 14 Feb 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 31.8 |
| CVE-2023-21710 | 14 Feb 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 24.0 |
| CVE-2023-28310 | 14 Jun 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 25.2 |
| CVE-2023-32031 | 14 Jun 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 31.8 |
| CVE-2023-35388 | 8 Aug 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 24.4 |
| CVE-2023-38181 | 8 Aug 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 25.3 |
| CVE-2023-38182 | 8 Aug 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 24.2 |
| CVE-2023-36744 | 12 Sep 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 25.4 |
| CVE-2023-36745 | 12 Sep 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 66.2 |
| CVE-2023-36756 | 12 Sep 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 25.4 |
| CVE-2023-36757 | 12 Sep 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 25.3 |
| CVE-2023-36777 | 12 Sep 2023 | Microsoft Exchange Server Information Disclosure Vulnerability | Grouped by weakness | 23.8 |
| CVE-2023-36035 | 14 Nov 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 26.2 |
| CVE-2023-36039 | 14 Nov 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 26.2 |
| CVE-2023-36050 | 14 Nov 2023 | Microsoft Exchange Server Spoofing Vulnerability | Grouped by weakness | 25.3 |
| CVE-2023-36439 | 14 Nov 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | Grouped by weakness | 24.0 |
| CVE-2026-55009 | 14 Jul 2026 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Grouped by weakness | 22.4 |
| CVE-2026-62912 | 11 Aug 2026 | Microsoft Exchange Server Denial of Service Vulnerability | Grouped by weakness | 20.6 |
| CVE-2026-87692 | 13 Oct 2026 | Microsoft Exchange Server Elevation of Privilege Vulnerability | Grouped by weakness | 22.1 |