Microsoft Exchange Server 2019 Cumulative Update 3
8 CVEs tracked. 5 of them are in CISA KEV.
This hub aggregates every CVE we track for Microsoft Exchange Server 2019 Cumulative Update 3. Use it to gauge the current risk picture and drill into individual advisories.
Microsoft Exchange Server 2019 Cumulative Update 3 CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 0 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 8 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical2
- High5
- Medium1
Latest CVEs
The 8 most recently published vulnerabilities affecting Microsoft Exchange Server 2019 Cumulative Update 3.
- CVE-2021-27065Microsoft Exchange Server Remote Code Execution Vulnerability7.8
- CVE-2021-26858Microsoft Exchange Server Remote Code Execution Vulnerability7.8
- CVE-2021-26857Microsoft Exchange Server Remote Code Execution Vulnerability7.8
- CVE-2021-26855Microsoft Exchange Server Remote Code Execution Vulnerability9.1
- CVE-2020-0903A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange S...5.4
- CVE-2020-0692An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.8.1
- CVE-2020-0688A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.8.8
- CVE-2019-1373A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.9.8
Product grouping is registry-driven, with AI assist and human review. How it works