CVE-2018-8273

—

CVSS 3.1

9.8 critical

EPSS

29%p98

Published

Aug 15, 2018 (Aug 15, 2018)

Modified

Jun 17, 2026

Description

A buffer overflow vulnerability exists in the Microsoft SQL Server that could allow remote code execution on an affected system, aka "Microsoft SQL Server Remote Code Execution Vulnerability." This affects Microsoft SQL Server.

Vendors: microsoft
Products: sql server
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (29.2%)

In the news3 stories

August 2018 Microsoft Patch Tuesday fixes two flaws exploited in attacks in the wild

Security AffairsAug 15, 08:40 UTC · Aug 15, 2018Exploit / PoC in the wildCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+5 CVEs

Microsoft Releases Patches for 60 Flaws—Two Under Active Attack

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2018Vulnerability in the wildCVE-2018-8373 CVE-2018-8414 CVE-2018-8273+5 CVEs

Microsoft Tuesday August 2018

Cisco TalosAug 14, 18:26 UTC · Aug 14, 2018Vulnerability CVE-2018-8273 CVE-2018-8302 CVE-2018-8344+49 CVEs