CVE-2018-8581highunder attackransomware

CVE-2018-8581: high-severity vulnerability in Microsoft Exchange Server

Published · Updated

Follow this CVE+ Monitor Microsoft Exchange Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

81Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.

ssvc Actcvss 7.4epss 28%
from disclosure to weaponsame day
Published on NVDNov 14
1st PoCJun 6
CISA KEV+1205d
Action required by CISAfederal deadline: 2022-03-17

Apply updates per vendor instructions.

In short

Microsoft Exchange Server has a flaw that allows a user with limited permissions to gain higher-level access they shouldn't have. This can give attackers more control over the email server.

Technical detail

An elevation of privilege vulnerability in Microsoft Exchange Server permits an authenticated attacker to escalate privileges through improper access control mechanisms. The vulnerability requires valid user credentials but allows unauthorized access to administrative functions, potentially compromising the integrity and confidentiality of the entire messaging system.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
Microsoft · Microsoft Exchange Server
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Microsoft Exchange Server

In the same product, most dangerous first.

CVE-2018-0986—CVE-2018-0986EPSS 63.3%CVE-2018-8302—CVE-2018-8302EPSS 27.1%CVE-2018-8154—CVE-2018-8154EPSS 23.6%CVE-2018-8265—CVE-2018-8265EPSS 19.3%CVE-2019-0586—CVE-2019-0586EPSS 15.4%CVE-2018-8151—CVE-2018-8151EPSS 8.7%