CVE-2026-70297

Description

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

Traduire en français

Produits concernés

• Microsoft Skype for Business Server 2015 CU13
• Microsoft Skype for Business Server 2019 CU8
• Microsoft Skype for Business Server Subscription Edition CU1

Scores CVSS

Faiblesses (CWE)

• CWE-36

Références

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-70297

Ailleurs

• NVD
• CVE.org
• CIRCL Vulnerability-Lookup
• CERT-FR
• GitHub Advisories