CVSS: 10.0EPSS: 10%CPEs: 6EXPL: 0CVE-2018-8154
https://notcve.org/view.php?id=CVE-2018-8154
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server. This CVE ID is unique from CVE-2018-8151. Existe una vulnerabilidad de ejecución remota de código en el software de Microsoft Exchange cuando no gestiona correctamente objetos en la memoria. Esto también se conoce como "Microsoft Exchange Memory Corruption Vulnerability". • http://www.securityfocus.com/bid/104054 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8154 • CWE-787: Out-of-bounds Write •
CVSS: 5.8EPSS: 0%CPEs: 4EXPL: 0CVE-2018-8159
https://notcve.org/view.php?id=CVE-2018-8159
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. Existe una vulnerabilidad de elevación de privilegios cuando Microsoft Exchange Outlook Web Access (OWA) fracasa a la hora de gestionar correctamente peticiones web. Esto también se conoce como "Microsoft Exchange Elevation of Privilege Vulnerability". Esto afecta a Microsoft Exchange Server. • http://www.securityfocus.com/bid/104056 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8159 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-8152
https://notcve.org/view.php?id=CVE-2018-8152
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server. Existe una vulnerabilidad de elevación de privilegios cuando Microsoft Exchange Outlook Web Access (OWA) fracasa a la hora de gestionar correctamente peticiones web. Esto también se conoce como "Microsoft Exchange Server Elevation of Privilege Vulnerability". Esto afecta a Microsoft Exchange Server. • http://www.securityfocus.com/bid/104043 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8152 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.8EPSS: 0%CPEs: 2EXPL: 0CVE-2018-8153
https://notcve.org/view.php?id=CVE-2018-8153
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server. Existe una vulnerabilidad de suplantación en Microsoft Exchange Server cuando Outlook Web Access (OWA) no gestiona correctamente las peticiones web. Esto también se conoce como "Microsoft Exchange Spoofing Vulnerability". Esto afecta a Microsoft Exchange Server. • http://www.securityfocus.com/bid/104045 http://www.securitytracker.com/id/1040850 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153 • CWE-290: Authentication Bypass by Spoofing •
CVSS: 9.3EPSS: 94%CPEs: 22EXPL: 1CVE-2018-0986 – Microsoft Windows Defender - 'mpengine.dll' Memory Corruption
https://notcve.org/view.php?id=CVE-2018-0986
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption, aka "Microsoft Malware Protection Engine Remote Code Execution Vulnerability." This affects Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center, Microsoft Forefront Endpoint Protection. Existe una vulnerabilidad de ejecución remota de código cuando Microsoft Malware Protection Engine no escanea correctamente un archivo especialmente manipulado. Esto desemboca en una corrupción de memoria, también conocida como "Microsoft Malware Protection Engine Remote Code Execution Vulnerability". Esto afecta a Windows Defender, Windows Intune Endpoint Protection, Microsoft Security Essentials, Microsoft System Center Endpoint Protection, Microsoft Exchange Server, Microsoft System Center y Microsoft Forefront Endpoint Protection. • https://www.exploit-db.com/exploits/44402 http://www.securityfocus.com/bid/103593 http://www.securitytracker.com/id/1040631 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0986 • CWE-787: Out-of-bounds Write •