Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2018-8474

Quick assessment

Affected
Microsoft Microsoft Lync
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Microsoft Lync（前称Microsoft Office Communicator）for Mac是美国微软（Microsoft）公司发布的用于Mac系统的新一代企业整合沟通平台。该平台能够跨越PC、Web、手机等其他移动设备，将不同的沟通方式集成到一个平台中。 Microsoft Lync for Mac 2011存在安全功能绕过漏洞，该漏洞源于程序没有正确地过滤特制的消息。攻击者可通过发送特制的消息利用该漏洞造成用户系统浏览至攻击者指定的网站或操作系统安全文件类型列表中的文件类型。

AI Predicted 6.5 Difficulty: Moderate EPSS 38.18% · P98

Public Exploits 1

ExploitDB · 1 EDB-45936 [dos]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2018-8474

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Lync for Mac 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Lync（前称Microsoft Office Communicator）for Mac是美国微软（Microsoft）公司发布的用于Mac系统的新一代企业整合沟通平台。该平台能够跨越PC、Web、手机等其他移动设备，将不同的沟通方式集成到一个平台中。 Microsoft Lync for Mac 2011存在安全功能绕过漏洞，该漏洞源于程序没有正确地过滤特制的消息。攻击者可通过发送特制的消息利用该漏洞造成用户系统浏览至攻击者指定的网站或操作系统安全文件类型列表中的文件类型。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Microsoft Microsoft Lync Mac 2011 -

II. Public POCs for CVE-2018-8474

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2018-8474

请登录查看更多情报信息。

Vendor Advisories for CVE-2018-8474 (3)

Exploits & Public PoCs for CVE-2018-8474 (1)

Same Patch Batch · Microsoft · 2018-09-13 · 62 CVEs total

CVE-2018-8445 Microsoft Windows kernel 信息泄露漏洞
CVE-2018-8466 Microsoft ChakraCore和Edge 缓冲区错误漏洞
CVE-2018-8469 Microsoft Edge 权限许可和访问控制问题漏洞
CVE-2018-8468 Microsoft Windows 权限许可和访问控制问题漏洞
CVE-2018-8467 Microsoft ChakraCore和Edge 缓冲区错误漏洞
CVE-2018-8455 Microsoft Windows kernel 权限许可和访问控制问题漏洞
CVE-2018-8452 Microsoft ChakraCore、Internet Explorer和Edge 信息泄露漏洞
CVE-2018-8449 Microsoft Windows Device Guard 安全漏洞
CVE-2018-8447 Microsoft Internet Explorer 缓冲区错误漏洞
CVE-2018-8446 Microsoft Windows kernel 信息泄露漏洞
CVE-2018-8456 Microsoft ChakraCore和Edge 缓冲区错误漏洞
CVE-2018-8444 Microsoft Windows 信息泄露漏洞
CVE-2018-8443 Microsoft Windows kernel 信息泄露漏洞
CVE-2018-8442 Microsoft Windows Kernel 信息泄露漏洞
CVE-2018-8441 Microsoft Windows Subsystem for Linux 权限许可和访问控制漏洞
CVE-2018-8440 Microsoft Windows 权限许可和访问控制问题漏洞
CVE-2018-8439 Microsoft Windows Hyper-V 安全漏洞
CVE-2018-8438 Microsoft Windows Hyper-V 安全漏洞
CVE-2018-8437 Microsoft Windows Hyper-V 安全漏洞
CVE-2018-8436 Microsoft Windows Hyper-V 安全漏洞

Showing top 20 of 62 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same vendor: Microsoft

V. Comments for CVE-2018-8474

No comments yet

Leave a comment