CVE-2018-8581 — Microsoft Exchange Server Privilege Escalation Vulnerability

Known ransomware use CISA KEV listed Added March 3, 2022 Remediate by March 17, 2022

Description

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8581

Need help remediating this vulnerability?

Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.

Talk to an engineer