Information disclosure

An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154...

CVE-2018-8154

CVE-2018-8154 is a remote code execution vulnerability in Microsoft Exchange Server caused by improper handling of objects in memory. The issue enables an attacker to run arbitrary code in the context of the System user, typically via a specially crafted email. Public material in the connected do...

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018

Description of the security update for Microsoft Exchange Server 2013 and 2016: May 8, 2018 Summary This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: Microsoft Common...

Update Rollup 21 for Exchange Server 2010 Service Pack 3

Update Rollup 21 for Exchange Server 2010 Service Pack 3 Summary This update rollup is a security update. This security update resolves vulnerabilities in Microsoft Exchange. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: : Microsoft Common...

KLA11242 Multiple vulnerabilities in Microsoft Exchange Server

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information and spoof user interface. Below is a complete list of vulnerabilities: 1. An improper handling of objects in...