CVE-2018-8311

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
microsoftCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
VendorProductVersion
microsoftlync
-
microsoftskype_for_business
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/104624
http://www.securitytracker.com/id/1041259
http://www.securitytracker.com/id/1041260
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311
http://www.securityfocus.com/bid/104624
http://www.securitytracker.com/id/1041259
http://www.securitytracker.com/id/1041260
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311