CVE-2018-8474

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.

Affected

Microsoft · Microsoft Lync

CVSS v3.0 NVD

7.5 HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N

EPSS

38.18% chance of exploitation in the next 30 days, 99th percentile

Published

2018-09-13

Updated

2024-08-05

Proof-of-concept exploits (1)

• nyxgeek/exploits4★ · 2024-06-27

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/45936

Security advisories

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474
• http://www.securityfocus.com/bid/105268
• http://www.securitytracker.com/id/1041633

References

• CVE Record
• NVD entry

Related

• CVE-2017-8550
• CVE-2020-5774