Product by Microsoft
Microsoft Exchange Server 2016 Cumulative Update 22
25 known vulnerabilities in Microsoft Exchange Server 2016 Cumulative Update 22 (Microsoft), 4 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
4
Actively exploited (KEV)
4
Used by ransomware
8
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-41040 | Microsoft Exchange Server Elevation of Privilege Vulnerability In CISA KEVRansomwarealso in 5 other products | 8.8 | |
| Critical | CVE-2022-41080 | Microsoft Exchange Server Elevation of Privilege Vulnerability In CISA KEVRansomwarealso in 5 other products | 8.8 | |
| Critical | CVE-2021-42321 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 4 other products | 8.8 | |
| Critical | CVE-2022-41082 | Microsoft Exchange Server Remote Code Execution Vulnerability In CISA KEVRansomwarealso in 5 other products | 8.0 | |
| High | CVE-2022-23277 | Microsoft Exchange Server Remote Code Execution Vulnerability | 8.8 | |
| Medium | CVE-2021-41349 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | |
| Medium | CVE-2022-24463 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | |
| Medium | CVE-2021-42305 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | |
| High | CVE-2022-21980 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 | |
| High | CVE-2022-24516 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 | |
| High | CVE-2021-34453 | Microsoft Exchange Server Denial of Service Vulnerability | 7.5 | |
| High | CVE-2022-24477 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 | |
| Medium | CVE-2022-30134 | Microsoft Exchange Server Information Disclosure Vulnerability | 6.5 | |
| Medium | CVE-2021-41350 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | |
| Critical | CVE-2022-21969 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | |
| Medium | CVE-2022-21979 | Microsoft Exchange Server Information Disclosure Vulnerability | 4.8 | |
| Critical | CVE-2022-21846 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | |
| Medium | CVE-2022-34692 | Microsoft Exchange Server Information Disclosure Vulnerability | 5.3 | |
| Critical | CVE-2022-21855 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | |
| Critical | CVE-2021-26427 | Microsoft Exchange Server Remote Code Execution Vulnerability | 9.0 | |
| High | CVE-2022-21978 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.2 | |
| High | CVE-2022-41078 | Microsoft Exchange Server Spoofing Vulnerability | 8.0 | |
| High | CVE-2022-41079 | Microsoft Exchange Server Spoofing Vulnerability | 8.0 | |
| High | CVE-2022-41123 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 7.8 | |
| High | CVE-2021-41348 | Microsoft Exchange Server Elevation of Privilege Vulnerability | 8.0 |