Vulnerability Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Exchange Server | 2010 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/104054Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040850Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154PatchVendor Advisory
- http://www.securityfocus.com/bid/104054Third Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1040850Third Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154PatchVendor Advisory
FAQ
What is CVE-2018-8154?
CVE-2018-8154 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This...
How severe is CVE-2018-8154?
CVE-2018-8154 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2018-8154?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Exchange Server.