CVE Watch—

CVE-2018-8581

Microsoft Exchange Server Privilege Escalation Vulnerability

CVSS

—

No CVSS

EPSS

27.4%

p98

KEV

YES

Mar 3, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

27.4%EPSS · 30 days27.4%

2026-08-022026-08-31

KEV catalog record

Product

Microsoft / Exchange Server

Vulnerability

Microsoft Exchange Server Privilege Escalation Vulnerability

Added to KEV

Mar 3, 2022

Remediate by

Mar 17, 2022

Known ransomware use

Yes

Summary description

A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-8581

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2023-215298.8 HIG

99.1%

KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability12d CVE-2022-410808.8 HIG

99.5%

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability21d CVE-2021-345239.0 CRI

100.0%

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability21d CVE-2021-344739.1 CRI

100.0%

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability21d CVE-2021-337667.3 HIG

99.9%

KEV—80Microsoft Exchange Server Information Disclosure21d CVE-2021-311967.2 HIG

98.9%

KEV—80Microsoft Exchange Server Information Disclosure Vulnerability21d