CVE-2018-8302: Critical severity microsoft exchange server vulnerability

Published Aug 15, 2018

Updated

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Affected Software

5 affected components

Microsoft Exchange Server=2010-sp3

Microsoft Exchange Server=2013-cumulative_update_20

Microsoft Exchange Server=2013-cumulative_update_21

Microsoft Exchange Server=2016-cumulative_update_10

Microsoft Exchange Server=2016-cumulative_update_9

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302

Event History

Aug 15, 2018

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2018-8302?

CVE-2018-8302 is considered a critical severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2018-8302?

To fix CVE-2018-8302, you should apply the latest security updates released by Microsoft for your affected Exchange Server version.

Which Microsoft Exchange versions are affected by CVE-2018-8302?

CVE-2018-8302 affects Microsoft Exchange Server versions 2010, 2013 (cumulative updates 20 and 21), and 2016 (cumulative updates 9 and 10).

What type of vulnerability is CVE-2018-8302?

CVE-2018-8302 is classified as a memory corruption vulnerability allowing remote code execution on Microsoft Exchange Server.

Can CVE-2018-8302 be exploited remotely?

Yes, CVE-2018-8302 can be exploited remotely, allowing an attacker to execute arbitrary code on the affected server.