CVE-2018-8546: Microsoft Lync

Medium severity, CVSS 5.9. EPSS: 5.5% chance of exploitation in the next 30 days.

A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.

Affected products

• Microsoft Lync: version 2013 only
• Microsoft Lync Basic: version 2013 only
• Microsoft Office: version 2019 only
• Microsoft Office 365 Proplus: affected versions not specified
• Microsoft Skype For Business: version 2016 only
• Microsoft Skype For Business Basic: version 2016 only

Published 2018-11-14. Last modified 2026-06-17.