Medium severity · published Nov 14, 2018
CVE-2018-8546
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft…
5.9
CVSS
5.5%
EPSS
No
On KEV
Description
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OF
Office · Microsoft
2019 · source: NVD
LY
Lync · Microsoft
2013 · source: NVD
LB
Lync Basic · Microsoft
2013 · source: NVD
O3
Office 365 Proplus · Microsoft
All versions, or not specified · source: NVD
SF
Skype For Business · Microsoft
2016 · source: NVD
SF
Skype For Business Basic · Microsoft
2016 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-8546
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-8546
Third Party Advisory
http://www.securityfocus.com/bid/105802
Third Party Advisory
http://www.securitytracker.com/id/1042125
Patch
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8546
More from Office
9.8
CVE-2024-21413
Microsoft Outlook Remote Code Execution Vulnerability
9.8
CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
8.8
CVE-2024-38189
Microsoft Project Remote Code Execution Vulnerability
8.8
CVE-2023-35311
Microsoft Outlook Security Feature Bypass Vulnerability
8.8
CVE-2019-1297
Microsoft Excel Remote Code Execution Vulnerability