VULNERABILITY INTELLIGENCE

CVE-2019-0586

CVSS score9.8 CRITICAL

EPSS probability15.40%

CISA KEVNot currently listed

Published2019-01-08

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory, aka "Microsoft Exchange Memory Corruption Vulnerability." This affects Microsoft Exchange Server.

Weakness classification

CWE-787: Out-of-bounds Write

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory