Patch tracker / Products / Microsoft Exchange Server 2019

Microsoft Exchange Server 2019: vulnerabilities and security updates

Every CVE affecting Microsoft Exchange Server 2019 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
40
Updates (KBs)
37
Actively exploited (KEV)
1
Critical Severity
4

CVEs affecting Microsoft Exchange Server 2019

CVESeverityCVSSEPSSStatus
CVE-2026-42897High8.171%KEV
CVE-2026-55008Critical9.620%-
CVE-2026-45502Critical9.620%-
CVE-2026-55005High8.820%-
CVE-2026-45504High8.820%-
CVE-2026-45503High8.120%-
CVE-2026-47631High8.120%-
CVE-2026-55006High7.820%-
CVE-2026-55009High7.820%-
CVE-2026-45583High7.520%-
CVE-2026-45501Medium6.520%-
CVE-2026-45500Medium6.120%-
CVE-2025-53786High8.07.7%-
CVE-2026-69356Critical9.31.1%-
CVE-2024-49040High7.57.5%-
CVE-2026-69641Critical9.11.1%-
CVE-2026-62913High8.81.3%-
CVE-2026-69355High8.81.1%-
CVE-2025-59249High8.81.0%-
CVE-2025-53782High8.41.0%-
CVE-2026-21527Medium6.58.0%-
CVE-2026-55007High8.11.1%-
CVE-2026-69380High8.11.1%-
CVE-2026-62911High8.01.3%-
CVE-2025-33051High7.51.4%-
CVE-2025-25006High7.51.4%-
CVE-2025-25007High7.51.4%-
CVE-2026-69378High7.51.1%-
CVE-2025-59248High7.51.0%-
CVE-2025-64667High7.51.0%-
CVE-2025-64666High7.51.0%-
CVE-2026-62914High7.31.3%-
CVE-2026-62910High7.21.3%-
CVE-2025-25005Medium6.51.4%-
CVE-2026-62912Medium6.51.3%-
CVE-2026-62915Medium6.51.3%-
CVE-2026-65813Medium6.51.3%-
CVE-2026-69361Medium6.51.1%-
CVE-2026-69375Medium6.51.1%-
CVE-2026-69382Medium5.91.1%-

Updates (KBs) for Microsoft Exchange Server 2019

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50941392026-05-12High8.171%1KEV
KB50941402026-05-12High8.171%1KEV
KB50941422026-05-12High8.171%1KEV
KB50941442026-05-12High8.171%1KEV
KB51032122026-07-14Critical9.620%11-
KB51032132026-07-14Critical9.620%11-
KB51032142026-07-14Critical9.620%11-
KB51032152026-07-14Critical9.620%11-
KB50471552025-08-12High8.07.7%1-
KB50506722025-08-12High8.07.7%1-
KB50506732025-08-12High8.07.7%1-
KB50506742025-08-12High8.07.7%1-
KB51216082026-09-08Critical9.31.1%9-
KB51216092026-09-08Critical9.31.1%9-
KB51216102026-09-08Critical9.31.1%9-
KB51216112026-09-08Critical9.31.1%8-
KB50492332024-11-12High7.57.5%1-
KB51215732026-08-11High8.81.3%7-
KB51215742026-08-11High8.81.3%7-
KB51215752026-08-11High8.81.3%7-
KB51215762026-08-11High8.81.3%7-
KB50663662025-10-14High8.81.0%3-
KB50663672025-10-14High8.81.0%3-
KB50663682025-10-14High8.81.0%3-
KB50663692025-10-14High8.81.0%3-
KB50749922026-02-10Medium6.58.0%1-
KB50749932026-02-10Medium6.58.0%1-
KB50749942026-02-10Medium6.58.0%1-
KB50749952026-02-10Medium6.58.0%1-
KB50632212025-08-12High7.51.4%4-
KB50632222025-08-12High7.51.4%4-
KB50632232025-08-12High7.51.4%4-
KB50632242025-08-12High7.51.4%4-
KB50718732025-12-09High7.51.0%2-
KB50718742025-12-09High7.51.0%2-
KB50718752025-12-09High7.51.0%2-
KB50718762025-12-09High7.51.0%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5120708 download and what it fixes KB5126052: the full CVE list KB5120238 install notes and severity KB5099540 download and what it fixes KB5099538 install notes and severity KB5122876: patch details KB5120994: patch details KB5120242 download and what it fixes KB5122882: the full CVE list KB5124008 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.