CVE-2023-38185

—

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Aug 8, 2023 (Aug 8, 2023)

Modified

Aug 10, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Vendors: microsoft
Products: exchange server
Weakness: CWE-23
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news2 stories

Microsoft Releases Patches for 74 New Vulnerabilities in August Update

The Hacker NewsAug 10, 03:31 UTC · Aug 10, 2023Vulnerability in the wildCVE-2023-20569 CVE-2023-36884 CVE-2023-35388+8 CVEs

60

Six critical vulnerabilities included in August’s Microsoft security update

Cisco TalosAug 8, 19:25 UTC · Aug 8, 2023Vulnerability in the wildCVE-2023-29328 CVE-2023-29330 CVE-2023-35385+18 CVEs

60