Vulnerability in Microsoft Exchange Server

CVE-2018-8265

A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution Vulnerability." This affects Microsoft Exchange Server.

EPSS: 0.192 (95.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Exchange Server — versions 2013 Cumulative Update 21, 2016 Cumulative Update 10

References

105491 (vdb-entry, x_refsource_BID)
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8265 (x_refsource_CONFIRM)
1041836 (vdb-entry, x_refsource_SECTRACK)