CVE-2018-8273

9.8 criticalEPSS 31%

Critical (9.8) in microsoft sql server. EPSS 31% chance of exploitation in the next 30 days.

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 31% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2018-08-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:sql_server

References

http://www.securityfocus.com/bid/104967
http://www.securitytracker.com/id/1041467
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273
http://www.securityfocus.com/bid/104967
http://www.securitytracker.com/id/1041467

Check your stack JSON