Veille CVE

Recherche « Microsoft lync »

5 CVE

Critique 0 Élevée 4 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Microsoft lync » ✕
  1. CVE-2026-85873 6.5 Moyenne

    Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1

    Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

  2. CVE-2026-83746 8.1 Élevée

    Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1

    Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

  3. CVE-2026-70297 8.8 Élevée

    Microsoft Skype for Business Server 2015 CU13 · Microsoft Skype for Business Server 2019 CU8 · Microsoft Skype for Business Server Subscription Edition CU1

    Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

  4. CVE-2015-1671 7.8 Élevée Exploitée

    Microsoft .net framework · Microsoft live meeting · Microsoft lync · Microsoft silverlight

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Attendee; Lync 2013 SP1; Lync Basic 2013 SP1; Silverlight 5 before 5.1.40416.00; and Silverlight 5 Developer Runtime before 5.1.40416.00, allows remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability."

  5. CVE-2013-3906 7.8 Élevée Exploitée

    Microsoft excel viewer · Microsoft lync · Microsoft office · Microsoft office compatibility pack

    GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Basic 2013 allows remote attackers to execute arbitrary code via a crafted TIFF image, as demonstrated by an image in a Word document, and exploited in the wild in October and November 2013.