Support ended
Exchange Server 2019
Support ended on 14 Oct 2025 (12 months ago). The newest release is 15.2.1748.55, published 13 Oct 2026.
What to do
Exchange Server 2019 no longer receives updates, including security fixes. Move what still runs it to a supported line.
15.2.1748.55Newest release · 1d ago
Ended
Support ended 14 Oct 2025
4Releases in the last 12 months · typically every 24 days
23CVEs fixed in collected releasesIs your version current?
Compared with the publisher's releases of this lineExchange Server support timeline
From first preview through release to end of support, as the vendors publish themExchange Server SE15.2.2562.56
Exchange Server 201915.2.1748.55 · ended 14 Oct 2025
Exchange Server 201615.1.2507.77 · ended 14 Oct 2025
Ticks are releases; the red ones fix CVEs. Dates come from each vendor's release and lifecycle data and move when the vendor changes them.
Releases of Exchange Server 2019
8 collected, newest first| Version | Published | Release | What the notes say |
|---|---|---|---|
| 15.2.1748.55 | 13 Oct 2026 | CU15 Oct26SUKB5128896 | — |
| 15.2.1544.50 | 13 Oct 2026 | CU14 Oct26SUKB5128897 | — |
| 15.2.1748.53 | 2 Oct 2026 | CU15 Sep26SUv2KB5129956 | — |
| 15.2.1544.48 | 2 Oct 2026 | CU14 Sep26SUv2KB5129957 | — |
| 15.2.1748.51 | 8 Sep 2026 | CU15 Sep26SUKB5121609 | — |
| 15.2.1544.46 | 8 Sep 2026 | CU14 Sep26SUKB5121610 | — |
| 15.2.1748.49 | 11 Aug 2026 | CU15 Aug26SUKB5121574 | — |
| 15.2.1544.44 | 11 Aug 2026 | CU14 Aug26SUKB5121575 | — |
Security fixes
CVEs the collected releases fix, newest first| CVE | Severity | Fixed in |
|---|---|---|
| CVE-2026-70279Microsoft Exchange Server Spoofing Vulnerability | Important · CVSS 9.3 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-77910Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-70571Microsoft Exchange Server Remote Code Execution Vulnerability | Critical · CVSS 8.1 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-87692Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-87695Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 7.8 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-87696Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 7.5 | 15.2.1544.50 · 13 Oct 2026 |
| CVE-2026-96940Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 8.8 | 15.2.1544.48 · 2 Oct 2026 |
| CVE-2026-69356Microsoft Exchange Server Spoofing Vulnerability | Important · CVSS 9.3 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69641Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 9.1 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69355Microsoft Exchange Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-55007Microsoft Exchange Server Remote Code Execution Vulnerability | Important · CVSS 8.1 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69380Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 8.1 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69378Microsoft Exchange Server Denial of Service Vulnerability | Important · CVSS 7.5 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69361Microsoft Exchange Server Spoofing Vulnerability | Important · CVSS 6.5 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69375Microsoft Exchange Server Tampering Vulnerability | Important · CVSS 6.5 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-69382Microsoft Exchange Server Information Disclosure Vulnerability | Important · CVSS 5.9 | 15.2.1544.46 · 8 Sep 2026 |
| CVE-2026-62913Microsoft Exchange Server Remote Code Execution Vulnerability | Important · CVSS 8.8 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-62911Microsoft Exchange Server Elevation of Privilege Vulnerability | Critical · CVSS 8.0 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-62914Microsoft Exchange Server Spoofing Vulnerability | Important · CVSS 7.3 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-62910Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 7.2 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-62912Microsoft Exchange Server Denial of Service Vulnerability | Important · CVSS 6.5 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-62915Microsoft Exchange Server Security Feature Bypass Vulnerability | Important · CVSS 6.5 | 15.2.1544.44 · 11 Aug 2026 |
| CVE-2026-65813Microsoft Exchange Server Elevation of Privilege Vulnerability | Important · CVSS 6.5 | 15.2.1544.44 · 11 Aug 2026 |
Open known issues
All Exchange Server issues- Availability (free/busy) fails for delegated mailboxes in Exchange hybrid deployments that use Graph API onlyProduct known issue · 2 Oct 2026
- Availability (free/busy) fails for delegated mailboxes in Exchange hybrid deployments using Graph API onlyProduct known issue · 8 Sep 2026
- showInAddressList property is out of sync with Microsoft ExchangeGraph known issue · Date not supplied
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.
Keep track
- Exchange Server RSS feed: new releases, known issues, retirements and roadmap changes.
- What I run: list the versions you run and see which fall behind or out of support.
- Everything about Exchange Server: its timeline, notices, roadmap and other lines.