Patch tracker / Products / Microsoft Exchange Server 2016
Microsoft Exchange Server 2016: vulnerabilities and security updates
Every CVE affecting Microsoft Exchange Server 2016 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.
CVEs
21
Updates (KBs)
25
Actively exploited (KEV)
1
Critical Severity
11
CVEs affecting Microsoft Exchange Server 2016
| CVE | Severity | CVSS | EPSS | Status |
|---|---|---|---|---|
| CVE-2026-42897 | High | 8.8 | 70% | KEV |
| CVE-2026-45500 | Critical | 9.6 | 70% | - |
| CVE-2026-45501 | Critical | 9.6 | 70% | - |
| CVE-2026-45502 | Critical | 9.6 | 70% | - |
| CVE-2026-45503 | Critical | 9.6 | 70% | - |
| CVE-2026-45504 | Critical | 9.6 | 70% | - |
| CVE-2026-45583 | Critical | 9.6 | 70% | - |
| CVE-2026-47631 | Critical | 9.6 | 70% | - |
| CVE-2026-55005 | Critical | 9.6 | 20% | - |
| CVE-2026-55006 | Critical | 9.6 | 20% | - |
| CVE-2026-55008 | Critical | 9.6 | 20% | - |
| CVE-2026-55009 | Critical | 9.6 | 20% | - |
| CVE-2025-53786 | High | 8.0 | 7.4% | - |
| CVE-2024-49040 | High | 7.5 | 7.8% | - |
| CVE-2026-21527 | Medium | 6.5 | 7.7% | - |
| CVE-2025-33051 | High | 7.5 | 1.3% | - |
| CVE-2025-25005 | High | 7.5 | 1.3% | - |
| CVE-2025-25006 | High | 7.5 | 1.3% | - |
| CVE-2025-25007 | High | 7.5 | 1.3% | - |
| CVE-2025-64667 | High | 7.5 | 1.0% | - |
| CVE-2025-64666 | High | 7.5 | 1.0% | - |
Updates (KBs) for Microsoft Exchange Server 2016
| Update | Released | Severity | CVSS | EPSS | CVEs | Status |
|---|---|---|---|---|---|---|
| KB5094139 | 2026-06-09 | High | 8.8 | 70% | 8 | KEV |
| KB5094140 | 2026-06-09 | High | 8.8 | 70% | 8 | KEV |
| KB5094142 | 2026-06-09 | High | 8.8 | 70% | 8 | KEV |
| KB5094144 | 2026-06-09 | High | 8.8 | 70% | 8 | KEV |
| KB5103212 | 2026-07-14 | Critical | 9.6 | 20% | 11 | - |
| KB5103213 | 2026-07-14 | Critical | 9.6 | 20% | 11 | - |
| KB5103214 | 2026-07-14 | Critical | 9.6 | 20% | 11 | - |
| KB5103215 | 2026-07-14 | Critical | 9.6 | 20% | 11 | - |
| KB5047155 | 2025-08-12 | High | 8.0 | 7.4% | 1 | - |
| KB5050672 | 2025-08-12 | High | 8.0 | 7.4% | 1 | - |
| KB5050673 | 2025-08-12 | High | 8.0 | 7.4% | 1 | - |
| KB5050674 | 2025-08-12 | High | 8.0 | 7.4% | 1 | - |
| KB5049233 | 2024-11-12 | High | 7.5 | 7.8% | 1 | - |
| KB5074992 | 2026-02-10 | Medium | 6.5 | 7.7% | 1 | - |
| KB5074993 | 2026-02-10 | Medium | 6.5 | 7.7% | 1 | - |
| KB5074994 | 2026-02-10 | Medium | 6.5 | 7.7% | 1 | - |
| KB5074995 | 2026-02-10 | Medium | 6.5 | 7.7% | 1 | - |
| KB5063221 | 2025-08-12 | High | 7.5 | 1.3% | 4 | - |
| KB5063222 | 2025-08-12 | High | 7.5 | 1.3% | 4 | - |
| KB5063223 | 2025-08-12 | High | 7.5 | 1.3% | 4 | - |
| KB5063224 | 2025-08-12 | High | 7.5 | 1.3% | 4 | - |
| KB5071873 | 2025-12-09 | High | 7.5 | 1.0% | 2 | - |
| KB5071874 | 2025-12-09 | High | 7.5 | 1.0% | 2 | - |
| KB5071875 | 2025-12-09 | High | 7.5 | 1.0% | 2 | - |
| KB5071876 | 2025-12-09 | High | 7.5 | 1.0% | 2 | - |
Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.
Most searched on Senserva right now
KB5099540: the full CVE list
KB5094123 download and what it fixes
KB5099538 download and what it fixes
CVE-2026-50522 patch and risk
CVE-2026-48282: how to fix it
KB5099539 download and what it fixes
KB5101001: the full CVE list
CVE-2026-55255 patch and risk
CVE-2008-4250 patch and risk
CVE-2007-3010: severity and the patch