CVE-2018-8154
9.8
CRITICAL · CVSS 3.0 · EPSS 24.1% (pctl 98)
Patch early
EPSS 24.1% — above the 10% action threshold.
Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 24.06% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-05-09 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | exchange server |
References
- http://www.securityfocus.com/bid/104054
- http://www.securitytracker.com/id/1040850
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154
- http://www.securityfocus.com/bid/104054
- http://www.securitytracker.com/id/1040850
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154
→ the Explorer · watch your stack · NVD