Microsoft Skype For Business Server 2015 Cu13 vulnerabilities

CVE-2023-41763 [MEDIUM] CWE-918 CVE-2023-41763: Skype for Business Elevation of Privilege Vulnerability Skype for Business Elevation of Privilege Vulnerability

CVE-2026-66302 [CRITICAL] CWE-73 CVE-2026-66302: External control of file name or path in Skype for Business allows an unauthorized attacker to execu External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.

CVE-2026-70297 [HIGH] CWE-36 CVE-2026-70297: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to ex Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

CVE-2026-83746 [HIGH] CWE-36 CVE-2026-83746: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to el Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

CVE-2026-66304 [HIGH] CWE-918 CVE-2026-66304: Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVE-2026-69646 [HIGH] CWE-347 CVE-2026-69646: Improper verification of cryptographic signature in Skype for Business allows an unauthorized attack Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

CVE-2026-66307 [HIGH] CWE-191 CVE-2026-66307: Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.

CVE-2023-36780 [HIGH] CWE-426 CVE-2023-36780: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2023-36786 [HIGH] CWE-36 CVE-2023-36786: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2023-36789 [HIGH] CWE-94 CVE-2023-36789: Skype for Business Remote Code Execution Vulnerability Skype for Business Remote Code Execution Vulnerability

CVE-2026-66305 [HIGH] CWE-603 CVE-2026-66305: Use of client-side authentication in Skype for Business allows an authorized attacker to perform spo Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.

CVE-2026-85873 [MEDIUM] CWE-639 CVE-2026-85873: Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to ele Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

CVE-2026-66303 [MEDIUM] CWE-476 CVE-2026-66303: Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.

CVE-2026-66308 [MEDIUM] CWE-125 CVE-2026-66308: Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a networ Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.

CVE-2026-66306 [MEDIUM] CWE-209 CVE-2026-66306: Generation of error message containing sensitive information in Skype for Business allows an unautho Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.

CVE-2026-63523 [MEDIUM] CWE-79 CVE-2026-63523: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.

CVE-2026-69642 [MEDIUM] CWE-79 CVE-2026-69642: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Bu Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.