Export limit exceeded: 407551 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (72 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-85873 | 1 Microsoft | 4 Skype For Business Server 2015, Skype For Business Server 2019, Skype For Business Server Subscription Edition and 1 more | 2026-10-13 | 6.5 Medium |
| Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-83746 | 1 Microsoft | 3 Skype For Business Server 2015, Skype For Business Server 2019, Skype For Business Server Subscription Edition | 2026-10-13 | 8.1 High |
| Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | ||||
| CVE-2026-70297 | 1 Microsoft | 3 Skype For Business Server 2015, Skype For Business Server 2019, Skype For Business Server Subscription Edition | 2026-10-13 | 8.8 High |
| Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. | ||||
| CVE-2026-69646 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 8.3 High |
| Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network. | ||||
| CVE-2026-69642 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 6.5 Medium |
| Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2026-66308 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 6.5 Medium |
| Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. | ||||
| CVE-2026-66307 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 7.5 High |
| Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. | ||||
| CVE-2026-66306 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 6.5 Medium |
| Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-66305 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 7.1 High |
| Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. | ||||
| CVE-2026-66304 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 7.5 High |
| Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. | ||||
| CVE-2026-66303 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 6.5 Medium |
| Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. | ||||
| CVE-2026-66302 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 9.8 Critical |
| External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. | ||||
| CVE-2026-63523 | 1 Microsoft | 4 Skype For Business Server, Skype For Business Server 2015, Skype For Business Server 2019 and 1 more | 2026-09-16 | 6.5 Medium |
| Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network. | ||||
| CVE-2024-20695 | 1 Microsoft | 1 Skype For Business Server | 2026-08-10 | 5.7 Medium |
| Skype for Business Information Disclosure Vulnerability | ||||
| CVE-2024-20673 | 1 Microsoft | 8 Excel, Office, Office Long Term Servicing Channel and 5 more | 2026-08-10 | 7.8 High |
| Microsoft Office Remote Code Execution Vulnerability | ||||
| CVE-2008-0454 | 2 Microsoft, Skype Technologies | 3 Internet Explorer, Windows, Skype | 2026-04-23 | N/A |
| Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via the Title field of a (1) Dailymotion and possibly (2) Metacafe movie in the Skype video gallery, accessible through a search within the "Add video to chat" dialog, aka "videomood XSS." | ||||
| CVE-2006-2312 | 2 Microsoft, Skype | 2 Windows, Skype | 2026-04-16 | N/A |
| Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches. | ||||
| CVE-2020-1025 | 1 Microsoft | 7 Lync, Lync Server, Sharepoint Enterprise Server and 4 more | 2026-02-23 | 9.8 Critical |
| An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve improper access. To exploit this vulnerability, an attacker would need to modify the token. The update addresses the vulnerability by modifying how Microsoft SharePoint Server and Skype for Business Server validate tokens. | ||||
| CVE-2022-24522 | 1 Microsoft | 1 Skype Extension | 2025-12-09 | 6.5 Medium |
| Skype Extension for Chrome Information Disclosure Vulnerability | ||||
| CVE-2023-41763 | 1 Microsoft | 1 Skype For Business Server | 2025-10-28 | 5.3 Medium |
| Skype for Business Elevation of Privilege Vulnerability | ||||