NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

CVE-2018-8302

CVSS 3.0: 9.8 critical
EPSS: 26%p98
Published: Aug 15, 2018 · Aug 15, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-8302 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Vendors: microsoft

Products: exchange server

Weakness: CWE-787

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (25.5%)

In the news

3 stories

August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild

Security AffairsAug 15, 08:40 UTC · Aug 15, 2018Exploit / PoCExploitedCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+52 · 1 read

60

Microsoft Releases Patches for 60 Flaws—Two Under Active Attack

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2018VulnerabilityExploitedCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+53 · 1 read

60

Microsoft Tuesday August 2018

Cisco TalosAug 14, 18:26 UTC · Aug 14, 2018VulnerabilityCVE-2018-8273 CVE-2018-8302 CVE-2018-8344+493 · 1 read

60