CVE-2018-8238

EPSS 5.5%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 5.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

11 Jul 2018Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.

Affected products

Microsoft · Microsoft Lync Microsoft · Skype

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238 http://www.securityfocus.com/bid/104619