CVE-2018-8302

9.8 criticalEPSS 27%

Critical (9.8) in microsoft exchange server. EPSS 27% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 27% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:exchange_server

References

http://www.securityfocus.com/bid/104973
http://www.securitytracker.com/id/1041468
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8302
http://www.securityfocus.com/bid/104973
http://www.securitytracker.com/id/1041468

Check your stack JSON