Critical severity9.8NVD Advisory· Published Nov 15, 2018· Updated Jun 17, 2026

CVE-2018-8529

Description

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Affected products

Microsoft/Team Foundation Serverllm-fuzzy
Microsoft/Teamscpe-rescue
Range: Foundation Server 2018 Update 1.1

Patches

Vulnerability mechanics

References

portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8529nvdPatchVendor Advisory
www.securityfocus.com/bid/105910nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.011
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000