CVE-2018-8302
9.8
CRITICAL · CVSS 3.0 · EPSS 25.5% (pctl 98)
Patch early
EPSS 25.5% — above the 10% action threshold.
Description
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.
Scoring
| CVSS | 9.8 (CRITICAL, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 25.52% — more likely to be exploited than 98% of all CVEs |
| Weakness | CWE-787 |
| On CISA KEV | no |
| Public exploit | none known |
| Published | 2018-08-15 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | exchange server |
References
- http://www.securityfocus.com/bid/104973
- http://www.securitytracker.com/id/1041468
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302
- http://www.securityfocus.com/bid/104973
- http://www.securitytracker.com/id/1041468
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302
→ the Explorer · watch your stack · NVD