CVE-2018-8265: Input Validation

Published Oct 10, 2018

Updated

A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution Vulnerability." This affects Microsoft Exchange Server.

Affected Software

2 affected components

Microsoft Exchange Server=2013-cumulative_update_21

Microsoft Exchange Server=2016-cumulative_update_10

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8265

Event History

Oct 10, 2018

CVE Published

via MITRE·01:00 PM

Data Sourced

via MITRE·01:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8265?

CVE-2018-8265 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2018-8265?

You can mitigate CVE-2018-8265 by applying the latest security updates provided by Microsoft for the affected Exchange Server versions.

Which versions of Exchange Server are affected by CVE-2018-8265?

CVE-2018-8265 affects Microsoft Exchange Server 2013 cumulative update 21 and Microsoft Exchange Server 2016 cumulative update 10.

What type of vulnerability is CVE-2018-8265?

CVE-2018-8265 is a remote code execution vulnerability that occurs due to improper parsing of specially crafted email messages.

Can CVE-2018-8265 be exploited remotely?

Yes, CVE-2018-8265 can be exploited remotely, allowing attackers to execute arbitrary code on the affected system.