CVE-2019-0586: Critical severity microsoft exchange server vulnerability

Published Jan 8, 2019

Updated

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Affected Software

3 affected components

Microsoft Exchange Server=2016-cumulative_update_10

Microsoft Exchange Server=2016-cumulative_update_11

Microsoft Exchange Server=2019

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0586

Event History

Jan 8, 2019

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-0586?

CVE-2019-0586 is rated as critical due to its potential for remote code execution.

How do I fix CVE-2019-0586?

To fix CVE-2019-0586, apply the latest security updates provided by Microsoft for your version of Exchange Server.

Which versions of Microsoft Exchange are affected by CVE-2019-0586?

CVE-2019-0586 affects Microsoft Exchange Server 2016 Cumulative Update 10, Cumulative Update 11, and Exchange Server 2019.

What type of vulnerability is CVE-2019-0586?

CVE-2019-0586 is a remote code execution vulnerability caused by memory corruption in Microsoft Exchange.

Can CVE-2019-0586 be exploited remotely?

Yes, CVE-2019-0586 can be exploited remotely, allowing attackers to execute arbitrary code on vulnerable servers.