CVE-2018-8311

EPSS 16.6%

Vexday Risk Score

8Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 16.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jul 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.

Productos afectados

Microsoft · Microsoft Lync Microsoft · Skype

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311 http://www.securityfocus.com/bid/104624 http://www.securitytracker.com/id/1041259 http://www.securitytracker.com/id/1041260