CVE-2018-8154

🗓️ 09 May 2018 19:00:00Reported by microsoftType

Remote code execution vulnerability in Microsoft Exchange softwar

Reporter	Title	Published	Views	Family All 20
BDU FSTEC	The vulnerability of the Microsoft Exchange Server mail server arises from a transaction that occurs outside the buffer in memory, allowing an attacker to execute arbitrary code.	22 Jun 201800:00	–	bdu_fstec
CNVD	Microsoft Exchange Server Remote Code Execution Vulnerability	9 May 201800:00	–	cnvd
CVE	CVE-2018-8154	9 May 201819:00	–	cve
Microsoft KB	Update Rollup 21 for Exchange Server 2010 Service Pack 3	8 May 201807:00	–	mskb
Microsoft KB	Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018	8 May 201807:00	–	mskb
Microsoft KB	Update Rollup 24 for Exchange Server 2010 Service Pack 3	8 May 201807:00	–	mskb
Kaspersky	KLA11242 Multiple vulnerabilities in Microsoft Exchange Server	8 May 201800:00	–	kaspersky
Microsoft CVE	Microsoft Exchange Memory Corruption Vulnerability	8 May 201807:00	–	mscve
Microsoft CVE	Microsoft Exchange Server Remote Code Execution Vulnerability	2 Mar 202108:00	–	mscve
Microsoft CVE	Microsoft Exchange Server Remote Code Execution Vulnerability	2 Mar 202108:00	–	mscve

[
  {
    "product": "Microsoft Exchange Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 3 Update Rollup 21"
      },
      {
        "status": "affected",
        "version": "2013 Cumulative Update 19"
      },
      {
        "status": "affected",
        "version": "2013 Cumulative Update 20"
      },
      {
        "status": "affected",
        "version": "2013 Service Pack 1"
      },
      {
        "status": "affected",
        "version": "2016 Cumulative Update 8"
      },
      {
        "status": "affected",
        "version": "2016 Cumulative Update 9"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1040850
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154
securityfocus	www.securityfocus.com/bid/104054

10 May 2018 09:57Current

7High risk

Vulners AI Score7

EPSS0.28208