{
    "id": "CVE-2018-8273",
    "published": "2018-08-15 17:29:03",
    "last_modified": "2026-06-17 02:04:32",
    "cvss_score": "9.8",
    "cvss_severity": "CRITICAL",
    "cvss_version": "3.1",
    "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
    "cwe": "CWE-787",
    "description": "A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka \"Microsoft SQL Server Remote Code Execution Vulnerability.\" This affects Microsoft SQL Server.",
    "epss_score": "0.29208",
    "epss_percentile": "0.98125",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 0,
    "updated_at": "2026-10-03 18:17:22",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "EPSS 29.2% — above the 10% action threshold."
    },
    "products": [
        {
            "vendor": "microsoft",
            "product": "sql_server"
        }
    ],
    "kev_detail": null,
    "exploits": [],
    "refs_list": [
        "http://www.securityfocus.com/bid/104967",
        "http://www.securitytracker.com/id/1041467",
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273",
        "http://www.securityfocus.com/bid/104967",
        "http://www.securitytracker.com/id/1041467",
        "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8273"
    ]
}