← All CVEs

CVE-2019-0586

critical · 9.8

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

9.8
CVSS
15.4%
EPSS (exploit prob.)
97th
EPSS percentile
2019-01-08
Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787

Affected products

VendorProductAffected versions
microsoftexchange_server2016
microsoftexchange_server2016
microsoftexchange_server2019

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-0586