Vulnerability in Microsoft Exchange Server
CVE-2018-0986
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnera…
EPSS: 0.754 (98.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Exchange Server — versions 2013, 2016
- Microsoft Forefront Endpoint Protection — versions 2010
- Microsoft Security Essentials — versions Microsoft Security Essentials
- Microsoft System Center — versions 2012 Endpoint Protection, 2012 R2 Endpoint Protection
- Microsoft System Center Endpoint Protection — versions Microsoft System Center Endpoint Protection
- Microsoft Windows Defender — versions Windows Server, version 1709 (Server Core Installation), Windows Server 2008 R2 for x64-based Systems Service Pack 1, Windows 10 Version 1607 for 32-bit Systems
- Microsoft Windows Intune Endpoint Protection — versions Windows Intune Endpoint Protection
Public proof-of-concept exploits
References
- 1040631 (vdb-entry, x_refsource_SECTRACK)
- 103593 (vdb-entry, x_refsource_BID)
- portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986 (x_refsource_CONFIRM)
- 44402 (exploit, x_refsource_EXPLOIT-DB)
Frequently asked questions
- What is CVE-2018-0986?
- CVE-2018-0986 is a vulnerability in Microsoft Exchange Server. Published 2018-04-04.
- Is CVE-2018-0986 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.