Microsoft Microsoft Exchange Server
18 CVEs affecting Microsoft Microsoft Exchange Server. Latest disclosed: 2019-07-15. Critical: 3, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-0586 | Critical | 9.8 | 2019-01-08 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8302 | Critical | 9.8 | 2018-08-15 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-8154 | Critical | 9.8 | 2018-05-09 | A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchan… |
CVE-2018-0986 | High | 8.8 | 2018-04-04 | A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory co… |
CVE-2019-1136 | High | 8.1 | 2019-07-15 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. |
CVE-2018-8265 | High | 7.8 | 2018-10-10 | A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Cod… |
CVE-2018-8581 | High | 7.4 | 2018-11-14 | An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects… |
CVE-2019-1084 | Medium | 6.5 | 2019-07-15 | An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated a… |
CVE-2019-0588 | Medium | 6.5 | 2019-01-08 | An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka… |
CVE-2019-0858 | Medium | 6.1 | 2019-04-09 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof… |
CVE-2019-0817 | Medium | 5.4 | 2019-04-09 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka 'Microsoft Exchange Spoof… |
CVE-2018-8448 | Medium | 5.4 | 2018-10-10 | An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange… |
CVE-2018-8159 | Medium | 5.4 | 2018-05-09 | An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange… |
CVE-2018-8153 | Medium | 5.4 | 2018-05-09 | A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoof… |
CVE-2018-8152 | Medium | 5.4 | 2018-05-09 | An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange… |
CVE-2018-8604 | Medium | 4.3 | 2018-12-12 | A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability."… |
CVE-2018-8374 | Medium | 4.3 | 2018-08-15 | A tampering vulnerability exists when Microsoft Exchange Server fails to properly handle profile data, aka "Microsoft Exchange Server Tampering Vulnerability."… |
CVE-2018-8151 | Medium | 4.3 | 2018-05-09 | An information disclosure vulnerability exists when Microsoft Exchange improperly handles objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerab… |