CVE-2018-8581

HighCVSS 7.4/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

Metrics

CVSS 3.1 7.4/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected software

VendorProductVersions
MicrosoftMicrosoft Exchange Server2010; 2013; 2016; 2019

References

Timeline

Published
Nov 14, 2018
Last modified
Jun 17, 2026
Added to CISA KEV
Mar 3, 2022
NVD status
Analyzed

Related CVEs from 2018

CVE-2018-85828.8A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft OCVE-2018-85837.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CCVE-2018-85847.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka "Windows ACVE-2018-85877.8A remote code execution vulnerability exists in Microsoft Outlook software when it fails to properly handle objects in memory, aka "MicrosofCVE-2018-85887.5A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "CCVE-2018-85897.8An elevation of privilege vulnerability exists when Windows improperly handles calls to Win32k.sys, aka "Windows Win32k Elevation of PrivileCVE-2018-85926.4An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media (USB, DVD, etc, aka "Windows ElCVE-2018-85956.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows CVE-2018-85966.5An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka "Windows CVE-2018-85977.8A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory, aka "CVE-2018-85984.7An information disclosure vulnerability exists when Microsoft Excel improperly discloses the contents of its memory, aka "Microsoft Excel InCVE-2018-85997.8An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper
CVE-2018-8581: High severity, CVSS 7.4 | Vulnix