CVE-2019-0586

—

CVSS 3.1

9.8 critical

EPSS

15%p97

Published

Jan 8, 2019 (Jan 8, 2019)

Modified

Jun 17, 2026

Description

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Vendors: microsoft
Products: exchange server
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (15.4%)

In the news2 stories

Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities

Security AffairsJan 9, 09:19 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547 CVE-2019-0550 CVE-2019-0551+46 CVEs

January 2019 Patch Tuesday: 49 security patches, 7 critical

Help Net SecurityJan 9, 00:00 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547 CVE-2019-0586 CVE-2019-0550+1 CVEs