Microsoft Skype For Business Server vulnerabilities

CVE-2023-41763 [MEDIUM] CWE-918 CVE-2023-41763: Skype for Business Elevation of Privilege Vulnerability Skype for Business Elevation of Privilege Vulnerability

CVE-2026-66302 [CRITICAL] CWE-73 CVE-2026-66302: External control of file name or path in Skype for Business allows an unauthorized attacker to execu External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

CVE-2026-66304 [HIGH] CWE-918 CVE-2026-66304: Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVE-2026-69646 [HIGH] CWE-347 CVE-2026-69646: Improper verification of cryptographic signature in Skype for Business allows an unauthorized attack Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-66307 [HIGH] CWE-191 CVE-2026-66307: Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

CVE-2023-36780 [HIGH] CWE-426 CVE-2023-36780: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2023-36786 [HIGH] CWE-36 CVE-2023-36786: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2023-36789 [HIGH] CWE-94 CVE-2023-36789: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2026-66305 [HIGH] CWE-603 CVE-2026-66305: Use of client-side authentication in Skype for Business allows an authorized attacker to perform spo Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.

CVE-2021-26422 [HIGH] CVE-2021-26422: Skype for Business and Lync Remote Code Execution Vulnerability Skype for Business and Lync Remote Code Execution Vulnerability

CVE-2026-66303 [MEDIUM] CWE-476 CVE-2026-66303: Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.

CVE-2026-66308 [MEDIUM] CWE-125 CVE-2026-66308: Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a networ Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.

CVE-2026-66306 [MEDIUM] CWE-209 CVE-2026-66306: Generation of error message containing sensitive information in Skype for Business allows an unautho Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVE-2022-26911 [MEDIUM] CVE-2022-26911: Skype for Business Information Disclosure Vulnerability Skype for Business Information Disclosure Vulnerability

CVE-2021-24073 [HIGH] CVE-2021-24073: Skype for Business and Lync Spoofing Vulnerability Skype for Business and Lync Spoofing Vulnerability

CVE-2019-0798 [MEDIUM] CWE-79 CVE-2019-0798: A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sa A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'.

CVE-2021-26421 [HIGH] CVE-2021-26421: Skype for Business and Lync Spoofing Vulnerability Skype for Business and Lync Spoofing Vulnerability

CVE-2021-24099 [MEDIUM] CVE-2021-24099: Skype for Business and Lync Denial of Service Vulnerability Skype for Business and Lync Denial of Service Vulnerability

CVE-2026-63523 [MEDIUM] CWE-79 CVE-2026-63523: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-69642 [MEDIUM] CWE-79 CVE-2026-69642: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.