High severity8.8NVD Advisory· Published Jul 11, 2018· Updated Jun 17, 2026

CVE-2018-8311

Description

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.

Affected products

Microsoft/Lyncllm-create2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 2013 Service Pack 1 (32-bit)
Microsoft/Skype For Businessllm-fuzzy
Microsoft/Skypecpe-rescue
Range: Business 2016 (32-bit)

Patches

Vulnerability mechanics

References

www.securityfocus.com/bid/104624nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041259nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1041260nvdThird Party AdvisoryVDB Entry
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.013
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000