CVE-2018-8529

9.8 criticalEPSS 13%

Critical (9.8) in microsoft team foundation server. EPSS 13% chance of exploitation in the next 30 days.

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 13% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
Published: 2018-11-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:team_foundation_server

References

http://www.securityfocus.com/bid/105910
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529
http://www.securityfocus.com/bid/105910
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529

Check your stack JSON