{"schema_version":"1","data":[{"id":3664,"advisory_id":"ac606f36-fb71-49a1-825b-026ca4a3a4b4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26857","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:23.044518+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-26857"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26857","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26857","aliases":["CVE-2021-26857"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2021-26857","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26857","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26857","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3656,"advisory_id":"12e03190-ae5f-4d75-ad8c-38a006e04b12","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-27065","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:33.243361+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-27065"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-27065","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-27065","aliases":["CVE-2021-27065"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-39"],"cveID":"CVE-2021-27065","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-27065","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-27065","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3655,"advisory_id":"d72d25e6-82b3-4acc-8bc2-16ad62549435","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26858","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:32.669635+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-26858"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26858","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26858","aliases":["CVE-2021-26858"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-26858","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26858","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26858","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3654,"advisory_id":"a24e52ac-99d0-4ddb-9402-be818e6c683e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-26855","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:32.095878+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-26855"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-26855","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-26855","aliases":["CVE-2021-26855"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-26855","notes":"Reference CISA's ED 21-02 (https://www.cisa.gov/news-events/directives/ed-21-02-mitigate-microsoft-exchange-premises-product-vulnerabilities) for further guidance and requirements. Note: The due date for addressing this vulnerability aligns with the requirements outlined in ED 21-02. https://nvd.nist.gov/vuln/detail/CVE-2021-26855","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. This vulnerability is part of the ProxyLogon exploit chain.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-26855","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3625,"advisory_id":"56fc1ee1-f0b0-4967-a9e7-9a954b3e6836","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31207","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:14.512042+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-31207"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Security Feature Bypass Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-31207","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31207","aliases":["CVE-2021-31207"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20","CWE-434"],"cveID":"CVE-2021-31207","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-31207","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass.","vulnerabilityName":"Microsoft Exchange Server Security Feature Bypass Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-31207","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3623,"advisory_id":"71b99edf-9393-478c-8de5-235904bcc19e","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34473","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:13.356238+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-34473"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34473","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34473","aliases":["CVE-2021-34473"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2021-34473","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34473","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34473","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3617,"advisory_id":"a3db64b0-9755-4c4a-b5f3-3b3a82dbaae4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-0688","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:09.857353+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2020-0688"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-0688","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-0688","aliases":["CVE-2020-0688"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2020-0688","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-0688","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-0688","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3613,"advisory_id":"bc5fe31c-cd0c-47fc-82d1-5950fc2c31d6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-34523","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:07.568697+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-34523"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-34523","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-34523","aliases":["CVE-2021-34523"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-34523","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-34523","dueDate":"2021-11-17","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2021-34523","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3609,"advisory_id":"fe79dce6-89db-4f8a-bede-77bc228b2f5c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-17144","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:38:05.311999+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2020-17144"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-17144","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-17144","aliases":["CVE-2020-17144"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2020-17144","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-17144","dueDate":"2022-05-03","product":"Exchange Server","dateAdded":"2021-11-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server improperly validates cmdlet arguments which allow an attacker to perform remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-17144","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2922,"advisory_id":"6178a42b-a9ec-46c5-a1eb-c0753b308132","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-33766","source_published_at":"2022-01-18T00:00:00+00:00","published_at":"2026-10-24T21:26:28.403876+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-33766"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure","summary":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-33766","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-33766","aliases":["CVE-2021-33766"],"affected":[],"modified":"2022-01-18T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2021-33766","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-33766","dueDate":"2022-02-01","product":"Exchange Server","dateAdded":"2022-01-18","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability which can allow an unauthenticated attacker to steal email traffic from target.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-33766","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2789,"advisory_id":"6c609c13-1167-4b45-a551-ac643f6729ea","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-8581","source_published_at":"2022-03-03T00:00:00+00:00","published_at":"2026-10-24T21:24:13.03232+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2018-8581"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-8581","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-8581","aliases":["CVE-2018-8581"],"affected":[],"modified":"2022-03-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2018-8581","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-8581","dueDate":"2022-03-17","product":"Exchange Server","dateAdded":"2022-03-03","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-8581","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1423,"advisory_id":"32101efb-81cf-4da4-b114-4f74482bcff4","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41040","source_published_at":"2022-09-30T00:00:00+00:00","published_at":"2026-10-24T21:02:21.932542+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2022-41040"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","summary":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41040","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41040","aliases":["CVE-2022-41040"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-918"],"cveID":"CVE-2022-41040","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41040","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server allows for server-side request forgery. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41082 which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Server-Side Request Forgery Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41040","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1422,"advisory_id":"72a5365d-d18e-416f-a08d-cac7c40e7a07","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41082","source_published_at":"2022-09-30T00:00:00+00:00","published_at":"2026-10-24T21:02:20.731928+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2022-41082"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Remote Code Execution Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41082","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41082","aliases":["CVE-2022-41082"],"affected":[],"modified":"2022-09-30T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2022-41082","notes":"https://msrc-blog.microsoft.com/2022/09/29/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/;  https://nvd.nist.gov/vuln/detail/CVE-2022-41082","dueDate":"2022-10-21","product":"Exchange Server","dateAdded":"2022-09-30","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for authenticated remote code execution. Dubbed \"ProxyNotShell,\" this vulnerability is chainable with CVE-2022-41040 which allows for the remote code execution.","vulnerabilityName":"Microsoft Exchange Server Remote Code Execution Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41082","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1387,"advisory_id":"5ba4c884-0642-4c89-a288-dceb8bb71cae","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41080","source_published_at":"2023-01-10T00:00:00+00:00","published_at":"2026-10-24T21:01:57.130584+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2022-41080"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41080","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41080","aliases":["CVE-2022-41080"],"affected":[],"modified":"2023-01-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2022-41080","notes":"https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080;  https://nvd.nist.gov/vuln/detail/CVE-2022-41080","dueDate":"2023-01-31","product":"Exchange Server","dateAdded":"2023-01-10","vendorProject":"Microsoft","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-41080","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1177,"advisory_id":"37330779-2810-40a7-86c9-08d5467d39d3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21410","source_published_at":"2024-02-15T00:00:00+00:00","published_at":"2026-10-24T20:57:20.466524+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2024-21410"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Privilege Escalation Vulnerability","summary":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21410","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21410","aliases":["CVE-2024-21410"],"affected":[],"modified":"2024-02-15T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-287"],"cveID":"CVE-2024-21410","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21410; https://nvd.nist.gov/vuln/detail/CVE-2024-21410","dueDate":"2024-03-07","product":"Exchange Server","dateAdded":"2024-02-15","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation.","vulnerabilityName":"Microsoft Exchange Server Privilege Escalation Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2024-21410","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1102,"advisory_id":"20624445-f8dc-45df-a4f1-b0854bf766d0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-31196","source_published_at":"2024-08-21T00:00:00+00:00","published_at":"2026-10-24T20:56:34.945965+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2021-31196"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Information Disclosure Vulnerability","summary":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2021-31196","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-31196","aliases":["CVE-2021-31196"],"affected":[],"modified":"2024-08-21T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":[],"cveID":"CVE-2021-31196","notes":"https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2021-31196; https://nvd.nist.gov/vuln/detail/CVE-2021-31196","dueDate":"2024-09-11","product":"Exchange Server","dateAdded":"2024-08-21","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains an information disclosure vulnerability that allows for remote code execution.","vulnerabilityName":"Microsoft Exchange Server Information Disclosure Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-31196","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":194,"advisory_id":"28582bc5-1cf5-4038-ba2b-5bd1e52433f3","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2023-21529","source_published_at":"2026-04-13T00:00:00+00:00","published_at":"2026-10-24T20:42:10.588137+00:00","extraction_method":"structured","technologies":["core-kev","exchange-server"],"cve_ids":["CVE-2023-21529"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","summary":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2023-21529","products":[{"name":{"value":"Exchange Server","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2023-21529","aliases":["CVE-2023-21529"],"affected":[],"modified":"2026-04-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-502"],"cveID":"CVE-2023-21529","notes":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21529 ; https://nvd.nist.gov/vuln/detail/CVE-2023-21529","dueDate":"2026-04-27","product":"Exchange Server","dateAdded":"2026-04-13","vendorProject":"Microsoft","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.","vulnerabilityName":"Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2023-21529","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3664,"next_before":194}