Vulnerabilidades do Microsoft Skype For Business Server
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Skype For Business Server: 11 registro(s), com versões afetadas e correções.cpe:2.3:a:microsoft:skype_for_business_server
CVE-2026-69646
Alta · 8.3
CWE-347 08/09/2026
Skype for Business Spoofing Vulnerability
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642
Média · 6.1
CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66308
Média · 6.5
CWE-125 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307
Alta · 7.5
CWE-191 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306
Média · 6.5
CWE-209 08/09/2026
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305
Alta · 7.1
CWE-603 08/09/2026
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-66304
Alta · 7.5
CWE-918 08/09/2026
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303
Média · 6.5
CWE-476 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66302
Crítica · 9.8
CWE-73 08/09/2026
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-63523
Média · 6.1
CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2023-41763
Média · 5.3
KEV Alta · 60 Exploit público CWE-918 10/10/2023
Microsoft Skype for Business Privilege Escalation Vulnerability
Skype for Business Elevation of Privilege Vulnerability