CVEvulnerability
CVE-2018-8154
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-05-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.
Affected configurations
• microsoft exchange server 2010
• microsoft exchange server 2013
• microsoft exchange server 2016
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/104054 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040850 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104054 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040850 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154 Patch, Vendor Advisory