CVE-2018-8238: High severity Microsoft Lync vulnerability

Published Jul 11, 2018

Updated

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.

Affected Software

2 affected components

Microsoft Lync=2013-sp1

Microsoft Skype for Business=2016

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238

Event History

Jul 11, 2018

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·12:29 AM

RemedyDescriptionSeverityAffected Software

Jul 27, 58461

Event

02:53 AM

Frequently Asked Questions

What is CVE-2018-8238?

CVE-2018-8238 is a security feature bypass vulnerability in Skype for Business and Lync.

What software is affected by CVE-2018-8238?

Microsoft Lync 2013 SP1 and Microsoft Skype for Business 2016 are affected by CVE-2018-8238.

What is the severity of CVE-2018-8238?

CVE-2018-8238 has a severity rating of 7.8 (critical).

How can I fix CVE-2018-8238?

Install the latest security updates and patches provided by Microsoft to fix CVE-2018-8238.

Are there any additional references to CVE-2018-8238?

For more information about CVE-2018-8238, you can refer to the following links: [1] http://www.securityfocus.com/bid/104619, [2] https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238