Vulnerabilities

TI-2026-47106 CVE-2026-66307 · GHSA-fmx2-865f-8c6j

Skype for Business and Lync Denial of Service Vulnerability

MEDIUM 41

Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01174 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-191

TI-2026-47102 CVE-2026-66303 · GHSA-g37h-5rqx-hvqg

Skype for Business and Lync Denial of Service Vulnerability

LOW 31

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01138 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-476

TI-2026-48945 CVE-2026-69646 · GHSA-935c-p9xv-m74w

Skype for Business Spoofing Vulnerability

LOW 38

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

CVSS 3.1HIGH 8.3 Adjacent network No auth No interaction EPSS 0.0032 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-347

TI-2026-48942 CVE-2026-69642 · GHSA-9xj5-8pjr-q9g3

Skype for Business Spoofing Vulnerability

LOW 29

Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00413 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-79

TI-2026-47104 CVE-2026-66305 · GHSA-9823-h4m8-w7cq

Skype for Business Spoofing Vulnerability

LOW 32

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00526 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-603

TI-2026-45253 CVE-2026-63523 · GHSA-cgvg-jx73-642p

Skype for Business Spoofing Vulnerability

LOW 30

Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00553 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-79

TI-2026-47107 CVE-2026-66308 · GHSA-hwrf-3w89-xf2g

Skype for Business and Lync Denial of Service Vulnerability

LOW 31

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01138 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-125

TI-2026-47105 CVE-2026-66306 · GHSA-f56r-qvv6-jr8m

Skype for Business Information Disclosure Vulnerability

LOW 31

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00922 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-209

TI-2026-47101 CVE-2026-66302 · GHSA-j9qr-gj45-j8p8

Skype for Business Remote Code Execution Vulnerability

MEDIUM 51

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00974 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-73

TI-2026-47103 CVE-2026-66304 · GHSA-wwcv-p4qq-wm65

Skype for Business Information Disclosure Vulnerability

MEDIUM 41

Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00973 Published 2026-09-08 Fixed in 6.0.9319.885, 7.0.2046.569 +1 CWE-918

TI-2024-13506 CVE-2024-20695 · GHSA-7wwp-jj6f-3856

Skype for Business Information Disclosure Vulnerability

LOW 26

Skype for Business Information Disclosure Vulnerability

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.0056 Published 2024-02-13 No fix listed CWE-284

TI-2023-18582 CVE-2023-36780 · GHSA-cpxx-4qwp-7xpq

Skype for Business Remote Code Execution Vulnerability

LOW 39

Skype for Business Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02682 Published 2023-10-10 Fixed in 7.0.246.530, 6.0.9319.869 CWE-426

TI-2023-18584 CVE-2023-36786 · GHSA-4j2g-cpw5-pjvq

Skype for Business Remote Code Execution Vulnerability

LOW 38

Skype for Business Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02572 Published 2023-10-10 Fixed in 6.0.9319.869, 7.0.246.530 CWE-36

TI-2023-18587 CVE-2023-36789 · GHSA-4m7g-cm2c-xffg

Skype for Business Remote Code Execution Vulnerability

LOW 38

Skype for Business Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02541 Published 2023-10-10 Fixed in 7.0.246.530, 6.0.9319.869 CWE-94

TI-2023-22168 CVE-2023-41763 · GHSA-7997-4r78-h34m

Skype for Business Elevation of Privilege Vulnerability

HIGH 81KEV

Skype for Business Elevation of Privilege Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.90282 Published 2023-10-10 Fixed in 6.0.9319.869, 7.0.246.530 CWE-918

TI-2022-10143 CVE-2022-26911 · GHSA-25r5-69f6-hgcg

Skype for Business Information Disclosure Vulnerability

LOW 35

Skype for Business Information Disclosure Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03631 Published 2022-04-15 Fixed in 8308.1194, 9319.628

TI-2022-10142 CVE-2022-26910 · GHSA-gq3f-cc5w-p8w5

Skype for Business and Lync Spoofing Vulnerability

LOW 35

Skype for Business and Lync Spoofing Vulnerability

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02477 Published 2022-04-15 Fixed in 9319.628, 2046.396 CWE-290

TI-2021-08239 CVE-2021-26422 · GHSA-322h-m7q9-7x4q

Skype for Business and Lync Remote Code Execution Vulnerability

LOW 36

Skype for Business and Lync Remote Code Execution Vulnerability

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02219 Published 2021-05-11 Fixed in 8308.1144, 2046.369 +1

TI-2021-08238 CVE-2021-26421 · GHSA-w6mv-8x3w-r7w5

Skype for Business and Lync Spoofing Vulnerability

LOW 34

Skype for Business and Lync Spoofing Vulnerability

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01411 Published 2021-05-11 Fixed in 2046.369, 8308.1144

TI-2021-06394 CVE-2021-24099 · GHSA-gr3f-8f43-4w8g

Skype for Business and Lync Denial of Service Vulnerability

LOW 35

Skype for Business and Lync Denial of Service Vulnerability

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03201 Published 2021-02-25 Fixed in publication

TI-2021-06369 CVE-2021-24073 · GHSA-6w2g-frp4-gwrv

Skype for Business and Lync Spoofing Vulnerability

LOW 35

Skype for Business and Lync Spoofing Vulnerability

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.01797 Published 2021-02-25 Fixed in publication

TI-2019-00563 CVE-2019-0798 · GHSA-43cx-jhp3-2qcr

Cross-site scripting in Microsoft Skype for Business Server 2015

LOW 31

A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.02084 Published 2019-04-09 No fix listed CWE-79

TI-2015-02232 CVE-2015-2536 · GHSA-mgv9-6p6c-9c3v

Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for…

LOW 31

Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype for Business Server a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.08863 Published 2015-09-09 No fix listed CWE-79

TI-2015-02228 CVE-2015-2531 · GHSA-wr7w-c745-69g3

Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server…

LOW 33

Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "Skype…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.10889 Published 2015-09-09 No fix listed CWE-79

Vulnerabilities

Filters