Microsoft Exchange Server 2019 Cumulative Update 14

productDE

cpe:/a:microsoft:exchange_server_2019:cumulative_update_14

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

critical

by severity

0critical4high2medium0low

updated 2026-10-28

vulnerabilities (50)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-21410US	—OT critical	12.7% (96th)	KEV	no fix	2024-02-13	—
CVE-2025-62221US	—OT critical	2.50% (85th)	KEV	no fix	2025-12-09	—
CVE-2025-53786US	—	7.59% (95th)	Exploit	no fix	2025-08-06	—
CVE-2025-62454US	—	2.29% (83rd)	Exploit	no fix	2025-12-09	—
CVE-2025-54100US	—	2.23% (83rd)	Exploit	no fix	2025-12-09	—
CVE-2025-62470US	—	0.51% (43rd)	Exploit	no fix	2025-12-09	—
CVE-2024-26198US	—	6.82% (94th)	—	no fix	2024-03-12	—
CVE-2025-59517US	—	2.45% (84th)	—	no fix	2025-12-09	—
CVE-2025-59516US	—OT elevated	2.34% (84th)	—	no fix	2025-12-09	—
CVE-2025-62472US	—	2.20% (82nd)	—	no fix	2025-12-09	—
CVE-2025-25005US	medium6.5	1.41% (72nd)	—	no fix	2025-08-12	—
CVE-2025-62549US	—	1.32% (71st)	—	no fix	2025-12-09	—
CVE-2025-33051US	—	1.27% (70th)	—	no fix	2025-08-12	—
CVE-2025-62456US	—	1.10% (66th)	—	no fix	2025-12-09	—
CVE-2025-62473US	—	1.08% (65th)	—	no fix	2025-12-09	—
CVE-2025-64678US	—	1.03% (64th)	—	no fix	2025-12-09	—
CVE-2025-62567US	—	1.03% (64th)	—	no fix	2025-12-09	—
CVE-2025-64666US	high7.5	1.02% (63rd)	—	no fix	2025-12-09	—
CVE-2025-59248US	high7.5	1.02% (63rd)	—	no fix	2025-10-14	—
CVE-2025-64670US	—	1.00% (63rd)	—	no fix	2025-12-09	—
CVE-2025-25006US	—	0.89% (59th)	—	no fix	2025-08-12	—
CVE-2025-25007US	—	0.87% (59th)	—	no fix	2025-08-12	—
CVE-2025-59249US	—	0.83% (57th)	—	no fix	2025-10-14	—
CVE-2025-64667US	—	0.80% (56th)	—	no fix	2025-12-09	—
CVE-2025-62458US	—	0.66% (51st)	—	no fix	2025-12-09	—
CVE-2025-62565US	—	0.57% (47th)	—	no fix	2025-12-09	—
CVE-2025-62468US	—	0.52% (44th)	—	no fix	2025-12-09	—
CVE-2025-62455US	—	0.47% (41st)	—	no fix	2025-12-09	—
CVE-2025-62465US	—	0.46% (40th)	—	no fix	2025-12-09	—
CVE-2025-62463US	—	0.46% (40th)	—	no fix	2025-12-09	—
CVE-2025-64679US	—	0.45% (39th)	—	no fix	2025-12-09	—
CVE-2025-62570US	medium5.5	0.40% (35th)	—	no fix	2025-12-09	—
CVE-2025-62466US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62457US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62572US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62571US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62467US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62464US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62462US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-62461US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-55233US	—	0.40% (34th)	—	no fix	2025-12-09	—
CVE-2025-64680US	—	0.37% (31st)	—	no fix	2025-12-09	—
CVE-2025-64673US	—	0.37% (30th)	—	no fix	2025-12-09	—
CVE-2025-62474US	—	0.37% (30th)	—	no fix	2025-12-09	—
CVE-2025-53782US	high7.8	0.36% (29th)	—	no fix	2025-10-14	—
CVE-2025-62569US	—	0.33% (26th)	—	no fix	2025-12-09	—
CVE-2025-64658US	high7.5	0.31% (24th)	—	no fix	2025-12-09	—
CVE-2025-64661US	—	0.25% (16th)	—	no fix	2025-12-09	—
CVE-2025-62469US	—	0.25% (16th)	—	no fix	2025-12-09	—
CVE-2025-62573US	—	0.25% (16th)	—	no fix	2025-12-09	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-122Heap-based Buffer Overflow7 CVEs
CWE-126Buffer Over-read5 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-416Use After Free5 CVEs
CWE-125Out-of-bounds Read4 CVEs
CWE-284Improper Access Control4 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs
CWE-476NULL Pointer Dereference3 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)50 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan