Patch tracker / Products / Microsoft Exchange Server 2019

Microsoft Exchange Server 2019: vulnerabilities and security updates

Every CVE affecting Microsoft Exchange Server 2019 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
31
Updates (KBs)
33
Actively exploited (KEV)
1
Critical Severity
1

CVEs affecting Microsoft Exchange Server 2019

CVESeverityCVSSEPSSStatus
CVE-2026-42897High8.171%KEV
CVE-2026-55008Critical9.620%-
CVE-2026-55005High8.820%-
CVE-2026-45504High8.820%-
CVE-2026-45503High8.120%-
CVE-2026-47631High8.120%-
CVE-2026-55006High7.820%-
CVE-2026-55009High7.820%-
CVE-2026-45583High7.520%-
CVE-2026-45501Medium6.520%-
CVE-2026-45500Medium6.120%-
CVE-2026-45502Medium5.020%-
CVE-2025-53786High8.07.4%-
CVE-2024-49040High7.57.6%-
CVE-2026-62913High8.81.3%-
CVE-2025-59249High8.80.9%-
CVE-2025-53782High8.40.9%-
CVE-2026-21527Medium6.57.7%-
CVE-2026-62911High8.01.3%-
CVE-2025-33051High7.51.3%-
CVE-2025-64666High7.51.0%-
CVE-2025-59248High7.50.9%-
CVE-2026-62914High7.31.3%-
CVE-2026-62910High7.21.3%-
CVE-2025-25005Medium6.51.3%-
CVE-2026-62912Medium6.51.3%-
CVE-2026-62915Medium6.51.3%-
CVE-2026-65813Medium6.51.3%-
CVE-2025-25006Medium5.31.3%-
CVE-2025-25007Medium5.31.3%-
CVE-2025-64667Medium5.31.0%-

Updates (KBs) for Microsoft Exchange Server 2019

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50941392026-05-12High8.171%1KEV
KB50941402026-05-12High8.171%1KEV
KB50941422026-05-12High8.171%1KEV
KB50941442026-05-12High8.171%1KEV
KB51032122026-07-14Critical9.620%11-
KB51032132026-07-14Critical9.620%11-
KB51032142026-07-14Critical9.620%11-
KB51032152026-07-14Critical9.620%11-
KB50471552025-08-12High8.07.4%1-
KB50506722025-08-12High8.07.4%1-
KB50506732025-08-12High8.07.4%1-
KB50506742025-08-12High8.07.4%1-
KB50492332024-11-12High7.57.6%1-
KB51215732026-08-11High8.81.3%7-
KB51215742026-08-11High8.81.3%7-
KB51215752026-08-11High8.81.3%7-
KB51215762026-08-11High8.81.3%7-
KB50663662025-10-14High8.80.9%3-
KB50663672025-10-14High8.80.9%3-
KB50663682025-10-14High8.80.9%3-
KB50663692025-10-14High8.80.9%3-
KB50749922026-02-10Medium6.57.7%1-
KB50749932026-02-10Medium6.57.7%1-
KB50749942026-02-10Medium6.57.7%1-
KB50749952026-02-10Medium6.57.7%1-
KB50632212025-08-12High7.51.3%4-
KB50632222025-08-12High7.51.3%4-
KB50632232025-08-12High7.51.3%4-
KB50632242025-08-12High7.51.3%4-
KB50718732025-12-09High7.51.0%2-
KB50718742025-12-09High7.51.0%2-
KB50718752025-12-09High7.51.0%2-
KB50718762025-12-09High7.51.0%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5099538: patch details KB5094123: the full CVE list KB5099539 install notes and severity CVE-2026-53412 exploit status KB5101650 download and what it fixes KB5120708 install notes and severity CVE-2026-55040 exploit status KB5101001: patch details KB5094128: the full CVE list
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.