CVE-2018-8151
At a glance Severity Not available EPSS EPSS 8.70 % · percentile 95 (2026-10-27) State PUBLISHED Published 2018-05-09 Updated 2024-08-05 Assigner microsoft NVD status Modified Description An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8154.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.3 AV:N/AC:M/Au:N/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_19:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_20:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*Affected products Product Versions Microsoft · Microsoft Exchange Server affected 2010 Service Pack 3 Update Rollup 21 ; affected 2013 Cumulative Update 19 ; affected 2013 Cumulative Update 20 ; affected 2013 Service Pack 1 ; affected 2016 Cumulative Update 8 ; affected 2016 Cumulative Update 9
References
Sources
