Microsoft Skype For Business Server vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Microsoft Skype For Business Server: 11 record(s), with affected versions and fixes.cpe:2.3:a:microsoft:skype_for_business_server
CVE-2026-69646
High · 8.3
CWE-347 Sep 8, 2026
Skype for Business Spoofing Vulnerability
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642
Medium · 6.1
CWE-79 Sep 8, 2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66308
Medium · 6.5
CWE-125 Sep 8, 2026
Skype for Business and Lync Denial of Service Vulnerability
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307
High · 7.5
CWE-191 Sep 8, 2026
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306
Medium · 6.5
CWE-209 Sep 8, 2026
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305
High · 7.1
CWE-603 Sep 8, 2026
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-66304
High · 7.5
CWE-918 Sep 8, 2026
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303
Medium · 6.5
CWE-476 Sep 8, 2026
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66302
Critical · 9.8
CWE-73 Sep 8, 2026
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-63523
Medium · 6.1
CWE-79 Sep 8, 2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2023-41763
Medium · 5.3
KEV High · 60 Public exploit CWE-918 Oct 10, 2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Skype for Business Elevation of Privilege Vulnerability