Vulnerabilidades do Microsoft Skype for Business Server Subscription Edition CU1
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Microsoft Skype for Business Server Subscription Edition CU1: 13 registro(s), com versões afetadas e correções.
CVE-2026-85873
Média · 6.5
CWE-639 13/10/2026
Skype for Business Elevation of Privilege Vulnerability
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-83746
Alta · 8.1
CWE-36 13/10/2026
Skype for Business Elevation of Privilege Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVE-2026-70297
Alta · 8.8
CWE-36 13/10/2026
Skype for Business Remote Code Execution Vulnerability
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVE-2026-69646
Alta · 8.3
CWE-347 08/09/2026
Skype for Business Spoofing Vulnerability
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-69642
Média · 6.1
CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66308
Média · 6.5
CWE-125 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66307
Alta · 7.5
CWE-191 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
CVE-2026-66306
Média · 6.5
CWE-209 08/09/2026
Skype for Business Information Disclosure Vulnerability
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66305
Alta · 7.1
CWE-603 08/09/2026
Skype for Business Spoofing Vulnerability
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
CVE-2026-66304
Alta · 7.5
CWE-918 08/09/2026
Skype for Business Information Disclosure Vulnerability
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVE-2026-66303
Média · 6.5
CWE-476 08/09/2026
Skype for Business and Lync Denial of Service Vulnerability
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
CVE-2026-66302
Crítica · 9.8
CWE-73 08/09/2026
Skype for Business Remote Code Execution Vulnerability
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
CVE-2026-63523
Média · 6.1
CWE-79 08/09/2026
Skype for Business Spoofing Vulnerability
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.