Microsoft Sets Final End to Exchange 2016 and 2019 Security Updates
Attack Surface Exposure · 3 sources · Updated 3mo ago · First seen Jul 22, 2026

Microsoft said the Extended Security Update (ESU) program for Exchange Server 2016 and Exchange Server 2019 will end in October 2026 with no further extension. The notice follows Microsoft's April announcement of a second ESU period, a six-month continuation after both on-premises Exchange versions had already reached end of support, confirming that customers relying on legacy deployments now face a fixed deadline for receiving security patches.
Microsoft is urging organizations to move to Exchange Server Subscription Edition (SE) or migrate to Exchange Online as support winds down. The company’s lifecycle guidance and follow-up reporting indicate that Exchange 2019 customers can perform an in-place upgrade to Exchange Server SE in a process similar to installing a cumulative update, while Exchange 2016 customers must plan a broader migration path before security coverage ends.


