Patch tracker / Products / Microsoft Exchange Server Subscription Edition

Microsoft Exchange Server Subscription Edition: vulnerabilities and security updates

Every CVE affecting Microsoft Exchange Server Subscription Edition and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
46
Updates (KBs)
11
Actively exploited (KEV)
1
Critical Severity
4

CVEs affecting Microsoft Exchange Server Subscription Edition

CVESeverityCVSSEPSSStatus
CVE-2026-42897High8.171%KEV
CVE-2026-55008Critical9.620%-
CVE-2026-55005High8.820%-
CVE-2026-45504High8.820%-
CVE-2026-45503High8.120%-
CVE-2026-47631High8.120%-
CVE-2026-55006High7.820%-
CVE-2026-55009High7.820%-
CVE-2026-45583High7.520%-
CVE-2026-45501Medium6.520%-
CVE-2026-45500Medium6.120%-
CVE-2026-45502Medium5.020%-
CVE-2025-53786High8.07.6%-
CVE-2026-70279Critical9.31.7%-
CVE-2026-69356Critical9.31.2%-
CVE-2026-96940High8.82.8%-
CVE-2026-69641Critical9.11.2%-
CVE-2026-62913High8.82.0%-
CVE-2026-77910High8.81.7%-
CVE-2026-69355High8.81.2%-
CVE-2025-59249High8.81.0%-
CVE-2026-21527Medium6.58.3%-
CVE-2025-53782High8.41.0%-
CVE-2026-70571High8.11.7%-
CVE-2026-62911High8.02.0%-
CVE-2026-55007High8.11.2%-
CVE-2026-69380High8.11.2%-
CVE-2026-87692High7.81.7%-
CVE-2026-87695High7.81.7%-
CVE-2026-87696High7.51.7%-
CVE-2025-33051High7.51.4%-
CVE-2026-62914High7.32.0%-
CVE-2026-69378High7.51.2%-
CVE-2025-59248High7.51.0%-
CVE-2025-64666High7.51.0%-
CVE-2026-62910High7.22.0%-
CVE-2026-62912Medium6.52.0%-
CVE-2026-62915Medium6.52.0%-
CVE-2026-65813Medium6.52.0%-
CVE-2025-25005Medium6.51.4%-
CVE-2026-69361Medium6.51.2%-
CVE-2026-69375Medium6.51.2%-
CVE-2026-69382Medium5.91.2%-
CVE-2025-25006Medium5.31.4%-
CVE-2025-25007Medium5.31.4%-
CVE-2025-64667Medium5.31.0%-

Updates (KBs) for Microsoft Exchange Server Subscription Edition

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB50941392026-05-12High8.171%1KEV
KB51032122026-06-09Critical9.620%11-
KB50471552025-08-12High8.07.6%1-
KB51288952026-10-13Critical9.31.7%6-
KB51216082026-09-08Critical9.31.2%9-
KB51299552026-10-13High8.82.8%1-
KB51215732026-08-11High8.82.0%7-
KB50663662025-10-14High8.81.0%3-
KB50749922026-02-10Medium6.58.3%1-
KB50632242025-08-12High7.51.4%4-
KB50718762025-12-09High7.51.0%2-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
All information provided as is, without warranty; verify against the vendor advisory before acting. All information and usage is subject to the Senserva EULA. Data notice and terms.