CVE-2018-8474 EXPLOIT
7.5
HIGH · CVSS 3.0 · EPSS 38.2% (pctl 99)
Patch early
A public exploit exists.
Description
A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.
Scoring
| CVSS | 7.5 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N |
| EPSS | 38.18% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2018-09-13 |
| Last modified | 2026-06-17 |
Affected (1)
| Vendor | Product |
|---|---|
| microsoft | lync for mac |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download | 2018-12-04 |
References
- http://www.securityfocus.com/bid/105268
- http://www.securitytracker.com/id/1041633
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474
- https://www.exploit-db.com/exploits/45936/
- http://www.securityfocus.com/bid/105268
- http://www.securitytracker.com/id/1041633
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474
- https://www.exploit-db.com/exploits/45936/
→ the Explorer · watch your stack · NVD