CVE-2018-8302

—

CVSS 3.0

9.8 critical

EPSS

26%p98

Published

Aug 15, 2018 (Aug 15, 2018)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Vendors: microsoft
Products: exchange server
Weakness: CWE-787
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (25.5%)

In the news3 stories

August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild

Security AffairsAug 15, 08:40 UTC · Aug 15, 2018Exploit / PoC in the wildCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+5 CVEs

Microsoft Releases Patches for 60 Flaws—Two Under Active Attack

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2018Vulnerability in the wildCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+5 CVEs

Microsoft Tuesday August 2018

Cisco TalosAug 14, 18:26 UTC · Aug 14, 2018Vulnerability CVE-2018-8273 CVE-2018-8302 CVE-2018-8344+49 CVEs