Recherche « Microsoft Skype for Business Server Subscription Edition CU1 »
13 CVE
-
CVE-2026-85873 6.5 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-83746 8.1 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
-
CVE-2026-70297 8.8 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
-
CVE-2026-69646 8.3 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
-
CVE-2026-69642 6.1 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
-
CVE-2026-66308 6.5 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
-
CVE-2026-66307 7.5 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
-
CVE-2026-66306 6.5 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-66305 7.1 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
-
CVE-2026-66304 7.5 Élevée
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
-
CVE-2026-66303 6.5 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
-
CVE-2026-66302 9.8 Critique
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
-
CVE-2026-63523 6.1 Moyenne
Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1 · Microsoft skype for business server
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.