CVE-2018-8154
First published: Wed May 09 2018(Updated: )
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Exchange Server | =2010-sp3 | |
| Microsoft Exchange Server | =2013-cumulative_update_19 | |
| Microsoft Exchange Server | =2013-cumulative_update_20 | |
| Microsoft Exchange Server | =2013-sp1 | |
| Microsoft Exchange Server | =2016-cumulative_update_8 | |
| Microsoft Exchange Server | =2016-cumulative_update_9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2018-8154?
CVE-2018-8154 is rated as critical due to its potential for remote code execution.
How do I fix CVE-2018-8154?
To fix CVE-2018-8154, apply the security update released by Microsoft for your specific version of Exchange Server.
Which versions of Microsoft Exchange are affected by CVE-2018-8154?
CVE-2018-8154 affects Microsoft Exchange Server 2010 SP3, 2013 with cumulative updates 19 and 20, and 2016 with cumulative updates 8 and 9.
What are the potential impacts of exploiting CVE-2018-8154?
Exploiting CVE-2018-8154 could allow an attacker to execute arbitrary code on the affected Exchange Server.
Is there a workaround for CVE-2018-8154?
There are no known workarounds for CVE-2018-8154; applying the appropriate security update is critical.
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/severity
- agent/author
- agent/references
- agent/remedy
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/first-publish-date
- agent/event
- agent/source
- vendor/microsoft
- canonical/microsoft exchange server
- version/microsoft exchange server/2010-sp3
- version/microsoft exchange server/2013-cumulative_update_19
- version/microsoft exchange server/2013-cumulative_update_20
- version/microsoft exchange server/2013-sp1
- version/microsoft exchange server/2016-cumulative_update_8
- version/microsoft exchange server/2016-cumulative_update_9