VULNERABILITY INTELLIGENCE

CVE-2018-8529

CVSS score9.8 CRITICAL

EPSS probability13.46%

CISA KEVNot currently listed

Published2018-11-15

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A remote code execution vulnerability exists when Team Foundation Server (TFS) does not enable basic authorization on the communication between the TFS and Search services, aka "Team Foundation Server Remote Code Execution Vulnerability." This affects Team.

Primary references

secure@microsoft.com — Third Party Advisory, VDB Entry
secure@microsoft.com — Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory