vulnerability

Microsoft Exchange: CVE-2018-8152: Microsoft Exchange Server Elevation of Privilege Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:P/I:P/A:N)

Published

May 9, 2018

Added

Aug 10, 2023

Modified

Jun 3, 2026

Description

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

Solutions

microsoft-exchange-exchange_server_2016_CU8-kb4092041microsoft-exchange-exchange_server_2016_CU9-kb4092041

References

CVE-2018-8152
https://attackerkb.com/topics/CVE-2018-8152
CWE-79
EUVD-EUVD-2018-19823
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-19823
https://support.microsoft.com/help/4092041

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report