CVE-2018-8154

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.

Score

CVSS 3.0 9.8 Critical

Status

Modified - secure@microsoft.com

Published

2018-05-09

Last modified

2024-08-05

Weaknesses

CWE-787

Affected products

• Exchange Server (Microsoft)
• Microsoft Exchange Server (Microsoft)

References

• http://www.securityfocus.com/bid/104054
• http://www.securitytracker.com/id/1040850
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154