{"id":"CVE-2018-8154","aliases":["EUVD-2018-19825","GHSA-6w9q-f7g5-94mq"],"status":"published","title":"A remote code execution vulnerability exists in Microsoft Exchange software when the software...","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka \"Microsoft Exchange Memory Corruption Vulnerability.\" This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.23642,"percentile":0.97826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-787"],"published":"2018-05-09T19:00:00Z","modified":"2026-06-17T02:04:21Z","products":[{"vendor":"microsoft","product":"exchange_server"},{"vendor":"microsoft","product":"microsoft exchange server"}],"references":[{"url":"http://www.securityfocus.com/bid/104054","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1040850","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-8154"},{"url":"https://github.com/advisories/GHSA-6w9q-f7g5-94mq"}],"sources":{"cve":[{"id":"CVE-2018-8154","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka \"Microsoft Exchange Memory Corruption Vulnerability.\" This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.","status":"published","published":"2018-05-09T19:00:00Z","modified":"2024-08-05T06:46:13.709Z","updated_at":"2026-11-02T14:35:04.172099Z"}],"euvd":[{"id":"EUVD-2018-19825","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka \"Microsoft Exchange Memory Corruption Vulnerability.\" This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.","status":"published","published":"2018-05-09T19:00:00Z","modified":"2024-08-05T06:46:13Z","updated_at":"2026-11-03T02:40:04.215722Z"}],"ghsa":[{"id":"GHSA-6w9q-f7g5-94mq","title":"A remote code execution vulnerability exists in Microsoft Exchange software when the software...","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka \"Microsoft Exchange Memory Corruption Vulnerability.\" This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.","status":"published","published":"2022-05-13T01:20:41Z","modified":"2023-02-01T05:06:12Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:50:19.669171Z"}],"nvd":[{"id":"CVE-2018-8154","description":"A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka \"Microsoft Exchange Memory Corruption Vulnerability.\" This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151.","status":"published","published":"2018-05-09T19:29:02.323Z","modified":"2026-06-17T02:04:21.697Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:04:26.098615Z"}]}}