Patch tracker / Products / Microsoft Exchange Server 2016

Microsoft Exchange Server 2016: vulnerabilities and security updates

Every CVE affecting Microsoft Exchange Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
40
Updates (KBs)
11
Actively exploited (KEV)
1
Critical Severity
9

CVEs affecting Microsoft Exchange Server 2016

CVESeverityCVSSEPSSStatus
CVE-2026-42897High8.10.5%KEV
CVE-2026-55008Critical9.62.5%-
CVE-2026-45500Critical9.62.5%-
CVE-2026-45501Critical9.62.5%-
CVE-2026-45502Critical9.62.5%-
CVE-2025-53786High8.07.7%-
CVE-2024-49040High7.58.5%-
CVE-2026-69356Critical9.31.2%-
CVE-2026-69361Critical9.31.2%-
CVE-2026-69375Critical9.31.2%-
CVE-2026-69382Critical9.31.2%-
CVE-2026-55005High8.82.5%-
CVE-2026-45504High8.82.5%-
CVE-2026-69641Critical9.11.2%-
CVE-2026-62912High8.82.0%-
CVE-2026-62913High8.82.0%-
CVE-2026-62915High8.82.0%-
CVE-2026-65813High8.82.0%-
CVE-2026-69355High8.81.2%-
CVE-2025-59249High8.81.0%-
CVE-2026-96940High8.80.5%-
CVE-2026-45503High8.12.5%-
CVE-2026-47631High8.12.5%-
CVE-2025-53782High8.41.0%-
CVE-2026-21527Medium6.58.1%-
CVE-2026-62911High8.02.0%-
CVE-2026-55006High7.82.5%-
CVE-2026-55009High7.82.5%-
CVE-2026-69380High8.11.2%-
CVE-2026-45583High7.52.5%-
CVE-2025-33051High7.51.4%-
CVE-2025-25005High7.51.4%-
CVE-2025-25006High7.51.4%-
CVE-2025-25007High7.51.4%-
CVE-2026-62914High7.32.0%-
CVE-2026-69378High7.51.2%-
CVE-2025-59248High7.51.0%-
CVE-2025-64667High7.51.0%-
CVE-2025-64666High7.51.0%-
CVE-2026-62910High7.22.0%-

Updates (KBs) for Microsoft Exchange Server 2016

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50941442026-05-12High8.10.5%1KEV
KB51032152026-07-14Critical9.62.5%11-
KB50506742025-08-12High8.07.7%1-
KB50492332024-11-12High7.58.5%1-
KB51216112026-09-08Critical9.31.2%8-
KB51215762026-08-11High8.82.0%7-
KB50663692025-10-14High8.81.0%3-
KB51299582026-10-02High8.80.5%1-
KB50749952026-02-10Medium6.58.1%1-
KB50632232025-08-12High7.51.4%4-
KB50718732025-12-09High7.51.0%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5122876 install notes and severity KB5126052: the full CVE list KB5122882: patch details KB5123099: the full CVE list KB5120708 download and what it fixes KB5122871 install notes and severity KB5129235 install notes and severity KB5122878: patch details KB5120238 download and what it fixes KB5129238 download and what it fixes
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.