{
  "cveId": "CVE-2018-8546",
  "url": "https://patchblox.com/security/cve/CVE-2018-8546",
  "summary": "CVE-2018-8546 is fixed in 8 products on 1 platform, first by KB4461487, released November 13, 2018. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Microsoft Skype for Business Denial of Service Vulnerability",
  "description": "\u003Cp\u003EA denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker\u0027s user rights.\u003C/p\u003E\n\u003Cp\u003EFor an attack to be successful, this vulnerability requires that a user sends a number of emojis in the affected version of Skype for Business.\u003C/p\u003E\n\u003Cp\u003EThe security update addresses the vulnerability by correcting how Skype for Business handles emojis.\u003C/p\u003E",
  "published": "2018-11-13T14:00:00Z",
  "severity": "Low",
  "epss": 0.0546,
  "epssPercentile": 0.92781,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Unlikely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2018-8546",
  "fixes": [
    {
      "platform": "microsoft",
      "product": "Microsoft Lync 2013 Service Pack 1 (32-bit)",
      "fixedVersion": "",
      "fix": "KB4461487",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461487",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Lync 2013 Service Pack 1 (64-bit)",
      "fixedVersion": "",
      "fix": "KB4461487",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461487",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Lync Basic 2013 Service Pack 1 (32-bit)",
      "fixedVersion": "",
      "fix": "KB4461487",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461487",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Microsoft Lync Basic 2013 Service Pack 1 (64-bit)",
      "fixedVersion": "",
      "fix": "KB4461487",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461487",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Skype for Business 2016 (32-bit)",
      "fixedVersion": "",
      "fix": "KB4461473",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461473",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Skype for Business 2016 (64-bit)",
      "fixedVersion": "",
      "fix": "KB4461473",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461473",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Skype for Business 2016 Basic (32-bit)",
      "fixedVersion": "",
      "fix": "KB4461473",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461473",
      "released": "2018-11-13T14:00:00Z"
    },
    {
      "platform": "microsoft",
      "product": "Skype for Business 2016 Basic (64-bit)",
      "fixedVersion": "",
      "fix": "KB4461473",
      "url": "https://patchblox.com/security/fix/microsoft/kb4461473",
      "released": "2018-11-13T14:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}