CVE-2018-8311

8.8 highEPSS 17%

High (8.8) in microsoft. EPSS 17% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2018-07-11
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:lync
microsoft:skype_for_business

References

http://www.securityfocus.com/bid/104624
http://www.securitytracker.com/id/1041259
http://www.securitytracker.com/id/1041260
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311
http://www.securityfocus.com/bid/104624

Check your stack JSON