Medium severity5.5NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026
CVE-2018-0941
CVE-2018-0941
Description
Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure vulnerability due to how data is imported, aka "Microsoft Exchange Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0924.
Affected products
4cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_7:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*
- (no CPE)range: = Cumulative Update 7, = Cumulative Update 8
- Microsoft Corporation/Exchange Serverv5Range: Microsoft Exchange Server 2016 Cumulative Update 7 and Microsoft Exchange Server 2016 Cumulative Update 8
Patches
Vulnerability mechanics
References
3- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0941nvdPatchVendor Advisory
- www.securityfocus.com/bid/103318nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1040521nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.