CVEvulnerability
CVE-2018-8302
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-08-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-787
Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
Affected configurations
• microsoft exchange server 2010
• microsoft exchange server 2013
• microsoft exchange server 2016
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/104973 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041468 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/104973 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1041468 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302 Patch, Vendor Advisory