A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka 'Microsoft Exchange Memory Corruption Vulnerability'.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Microsoft Exchange | — | Download and install Microsoft KB4536987 | Aug 10, 2023 | Feb 11, 2020 |
| Msft | — | Upgrade to latest version of Exchange ServerSecurity Update For Exchange Server 2013 CU23 (KB4536988)Update Rollup 30 for Exchange Server 2010 Service Pack 3 (KB4536989) | Feb 11, 2020 | Feb 11, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub