Critical severity9.8NVD Advisory· Published May 9, 2018· Updated Jun 17, 2026

CVE-2018-8154

Description

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.

Affected products

Microsoft/Exchange Servercpe-rescue
Range: 2010 Service Pack 3 Update Rollup 21

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154nvdPatchVendor Advisory
www.securityfocus.com/bid/104054nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1040850nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.017
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000