CVE-2018-8546 is a denial of service vulnerability affecting Microsoft Skype for Business, Lync, and Office 365 ProPlus. With a CVSS score of 5.9 (Medium), this vulnerability can be exploited remotely with high attack complexity, leading to a complete denial of service without requiring user interaction. While its EPSS score is relatively low, indicating a lower likelihood of exploitation, there are no known public exploits or Metasploit modules available. Community discussion and media coverage are minimal, suggesting it is not currently a high-profile threat.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2013CPE matchmatch criteria | cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:* | ||
2013CPE matchmatch criteria | cpe:2.3:a:microsoft:lync_basic:2013:sp1:*:*:*:*:*:* | ||
2019CPE matchmatch criteria | cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:* | ||
2016CPE matchmatch criteria | cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.