high7.4Known exploited
CVE-2018-8581
Microsoft Exchange Server Privilege Escalation Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-03-03. Federal due date: 2022-03-17.
Apply updates per vendor instructions.
Impact
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Exchange Server | Versions 2010, 2013, 2016, 2019 |
References
- NVD record
- CVE.org record
- CISA KEV catalog
- http://www.securityfocus.com/bid/105837
- http://www.securitytracker.com/id/1042141
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581
- http://www.securityfocus.com/bid/105837
- http://www.securitytracker.com/id/1042141
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8581