CVE-2018-8265: Microsoft Exchange Server

High severity, CVSS 7.8. EPSS: 19.3% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists in the way Microsoft Exchange software parses specially crafted email messages, aka "Microsoft Exchange Remote Code Execution Vulnerability." This affects Microsoft Exchange Server.

Affected products

• Microsoft Exchange Server: version 2013 only; version 2016 only

Published 2018-10-10. Last modified 2026-06-17.