CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 05:50 UTC )
This week: 5,436 CVEs published, 357 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,436 Show in the list Critical, last 7 days 357 Show in the list Healthcare-tagged, last 7 days 4 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product microsoft:exchange_server_2019_cumulative_update_15 . Show all products
27 CVEs, showing 1 to 27
CVE Severity Title Published CVE-2026-87696 High 7.5 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-87695 High 7.8 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-77910 High 8.8 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70571 High 8.1 Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-70279 Critical 9.3 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
Oct 13, 2026 CVE-2026-96940 High 8.8 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Oct 2, 2026 CVE-2026-69641 Critical 9.1 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69382 Medium 5.9 Microsoft Exchange Server Information Disclosure Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69380 High 8.1 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69378 High 7.5 Microsoft Exchange Server Denial of Service Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69375 Medium 6.5 Microsoft Exchange Server Tampering Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69361 Medium 6.5 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69356 Critical 9.3 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-69355 High 8.8 Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-55007 High 8.1 Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft
Sep 8, 2026 CVE-2026-62911 High 8.0 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-65813 Medium 6.5 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62915 Medium 6.5 Microsoft Exchange Server Security Feature Bypass Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62914 High 7.3 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62913 High 8.8 Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62912 Medium 6.5 Microsoft Exchange Server Denial of Service Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-62910 High 7.2 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Aug 11, 2026 CVE-2026-55009 High 7.8 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-55008 Critical 9.6 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-55006 High 7.8 Microsoft Exchange Server Elevation of Privilege Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-55005 High 8.8 Microsoft Exchange Server Remote Code Execution Vulnerability Assigned by microsoft
Jul 14, 2026 CVE-2026-42897 Known exploited
High 8.1 Microsoft Exchange Server Spoofing Vulnerability Assigned by microsoft
May 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
