MSRXMSRXSecurity
Vulnerabilities / Microsoft Exchange (OWA)

Microsoft Exchange (OWA) vulnerabilities

1 Microsoft Exchange (OWA) flaw was confirmed exploited in the wild in the past 365 days, 1 used in ransomware. Patch these first.

AddedExploited vulnerabilityFix by
2026-04-13CVE-2023-21529 Microsoft Exchange Server
ransomwareMicrosoft Exchange Server Deserialization of Untrusted Data Vulnerability

Microsoft Exchange Server contains a deserialization of untrusted data that allows an authenticated attacker to achieve remote code execution.

2026-04-27
Scan a website for Microsoft Exchange (OWA)Check your dependenciesAll products

Source: CISA Known Exploited Vulnerabilities catalog 2026.10.28 (live), refreshed every 12 hours.