Microsoft Skype For Business Server Subscription Edition vulnerabilities
10 vulnerabilities
Known vulnerabilities in Microsoft Skype For Business Server Subscription Edition, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-63523microsoftskype_for_business_server+4
EPSS score0.55%
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.CVE-2026-66302microsoftskype_for_business_server+4EPSS score0.97%
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.CVE-2026-66303microsoftskype_for_business_server+4EPSS score1.14%
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66304microsoftskype_for_business_server+4EPSS score0.97%
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-66307microsoftskype_for_business_server+4EPSS score1.17%
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.CVE-2026-66305microsoftskype_for_business_server+4EPSS score0.53%
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.CVE-2026-66308microsoftskype_for_business_server+4EPSS score1.14%
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66306microsoftskype_for_business_server+4EPSS score0.92%
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-69646microsoftskype_for_business_server+4EPSS score0.32%
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.CVE-2026-69642microsoftskype_for_business_server+4EPSS score0.41%
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.