Microsoft Skype For Business Server Subscription Edition CU1 vulnerabilities
13 vulnerabilities
Known vulnerabilities in Microsoft Skype For Business Server Subscription Edition CU1, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2026-85873microsoftskype for business server 2015 cu13+2
EPSS score0.82%
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.CVE-2026-83746microsoftskype for business server 2015 cu13+2EPSS score1.01%
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.CVE-2026-70297microsoftskype for business server 2015 cu13+2EPSS score1.02%
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.CVE-2026-63523microsoftskype_for_business_server+4EPSS score0.55%
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.CVE-2026-66302microsoftskype_for_business_server+4EPSS score0.97%
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.CVE-2026-66303microsoftskype_for_business_server+4EPSS score1.14%
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66304microsoftskype_for_business_server+4EPSS score0.97%
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-66307microsoftskype_for_business_server+4EPSS score1.17%
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.CVE-2026-66305microsoftskype_for_business_server+4EPSS score0.53%
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.CVE-2026-66308microsoftskype_for_business_server+4EPSS score1.14%
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66306microsoftskype_for_business_server+4EPSS score0.92%
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-69646microsoftskype_for_business_server+4EPSS score0.32%
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.CVE-2026-69642microsoftskype_for_business_server+4EPSS score0.41%
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.