WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product exchange server✕
Overview 27 matches · 0 in Waratek scope · 0 protected · 6 exploited · 5 CISA KEV · 6 public PoC · 6 EPSS ≥ 0.5
27matches 0in Waratek scope0.0% 0protected0.0% 6exploited22.2% 5CISA KEV18.5% 6public PoC22.2% 6EPSS ≥ 0.522.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 27 100.0% Withdrawn CVE 0 0.0%
Critical 27 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 27 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 22.2% Working exploit published 2 7.4% Proof of concept only 1 3.7% Forecast only 0 0.0% No public exploit 18 66.7%
split by peak 9 / year
Not applicable: 27 Critical: 27 not blocked: 27 No public exploit: 18Proof of concept only: 1Working exploit published: 2Exploited: 6
20185 Not applicable5 Critical5 not blocked5 No public exploit5 20192 Not applicable2 Critical2 not blocked2 No public exploit2 20202 Not applicable2 Critical2 not blocked2 Working exploit published1 No public exploit1 20219 Not applicable9 Critical9 not blocked9 Exploited4 Working exploit published1 Proof of concept only1 No public exploit3 20224 Not applicable4 Critical4 not blocked4 Exploited1 No public exploit3 20231 Not applicable1 Critical1 not blocked1 No public exploit1 20241 Not applicable1 Critical1 not blocked1 Exploited1 20250 20263 Not applicable3 Critical3 not blocked3 No public exploit3
201820192020202120222023202420252026
27 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-69641 Critical 2026-09-08 Not applicable No public exploit Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-69356 Critical 2026-09-08 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-55008 Critical 2026-07-14 Not applicable No public exploit Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.
CVE-2024-21410 Critical 2024-02-13 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2023-21709 Critical 2023-08-08 Not applicable No public exploit Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-41080 Critical 2022-11-09 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2022-21969 Critical 2022-01-11 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21855 Critical 2022-01-11 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2022-21846 Critical 2022-01-11 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26427 Critical 2021-10-13 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-34523 Critical 2021-07-14 Not applicable Exploited Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-34473 Critical 2021-07-14 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28483 Critical 2021-04-13 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28481 Critical 2021-04-13 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-28480 Critical 2021-04-13 Not applicable Working exploit published Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-27078 Critical 2021-03-03 Not applicable No public exploit Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26855 Critical 2021-03-03 Not applicable Exploited Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2021-26412 Critical 2021-03-03 Not applicable Proof of concept only Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2020-17142 Critical 2020-12-10 Not applicable No public exploit Microsoft Exchange Remote Code Execution Vulnerability
CVE-2020-17132 Critical 2020-12-10 Not applicable Working exploit published Microsoft Exchange Remote Code Execution Vulnerability
CVE-2019-1373 Critical 2019-11-12 Not applicable No public exploit A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.
CVE-2019-0586 Critical 2019-01-08 Not applicable No public exploit A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
CVE-2018-17570 Critical 2018-09-26 Not applicable No public exploit utils/ut_ws_svr.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVE-2018-17569 Critical 2018-09-26 Not applicable No public exploit network/nw_buf.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVE-2018-17568 Critical 2018-09-26 Not applicable No public exploit utils/ut_rpc.c in ViaBTC Exchange Server before 2018-08-21 has an integer overflow leading to memory corruption.
CVE-2018-8302 Critical 2018-08-15 Not applicable No public exploit A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
CVE-2018-8154 Critical 2018-05-09 Not applicable No public exploit A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.