Lync (Microsoft) - vulnerabilities (CVEs)

43 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2020-07-14. Vendor: Microsoft.

CVEs of Lync

CVE-2020-1025 - CVSS 9.8 (critical), 2020-07-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An…
CVE-2019-1209 - CVSS 6.5 (medium), 2019-09-11: An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
CVE-2019-1084 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated…
CVE-2018-8546 - CVSS 5.9 (medium), 2018-11-14: A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365…
CVE-2018-8311 - CVSS 8.8 (high), 2018-07-11: A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka…
CVE-2018-8238 - CVSS 7.8 (high), 2018-07-11: A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for…
CVE-2017-11786 - CVSS 8.8 (high), 2017-10-13: Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due…
CVE-2017-8695 - CVSS 5.3 (medium), 2017-09-13: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10…
CVE-2017-8696 - CVSS 7.5 (high), 2017-09-13: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016;…
CVE-2017-8676 - CVSS 3.3 (low), 2017-09-13: The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2017-8527 - CVSS 8.8 (high), 2017-06-15: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…
CVE-2017-0283 - CVSS 8.8 (high), 2017-06-15: Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…
CVE-2017-0108 - CVSS 7.8 (high), 2017-03-17: The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007;…
CVE-2017-0060 - CVSS 5.5 (medium), 2017-03-17: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold…
CVE-2017-0073 - CVSS 4.3 (medium), 2017-03-17: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold…
CVE-2016-7182 - CVSS 9.8 (critical), 2016-10-14: The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2016-3396 - CVSS 7.8 (high), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3263 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3262 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3209 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3304 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer,…
CVE-2016-3303 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer,…
CVE-2016-3301 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2016-0145 - CVSS 8.8 (high), 2016-04-12: The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT…
CVE-2015-6108 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold…
CVE-2015-6107 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold…
CVE-2015-6106 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync…
CVE-2015-6061 - CVSS 4.3 (medium), 2015-11-11: Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote…
CVE-2015-2503 - CVSS 9.3 (critical), 2015-11-11: Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3,…
CVE-2015-2510 - CVSS 9.3 (critical), 2015-09-09: Buffer overflow in the Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Lync 2010, Lync…
CVE-2015-2464 - CVSS 9.3 (critical), 2015-08-15: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and…
CVE-2015-2463 - CVSS 9.3 (critical), 2015-08-15: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and…
CVE-2015-2456 - CVSS 9.3 (critical), 2015-08-15: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and…
CVE-2015-2455 - CVSS 9.3 (critical), 2015-08-15: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and…
CVE-2015-2435 - CVSS 9.3 (critical), 2015-08-15: Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and…
CVE-2015-2431 - CVSS 9.3 (critical), 2015-08-15: Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote…
CVE-2015-1671 - CVSS 7.8 (high), 2015-05-13: The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting…
CVE-2013-3906 - CVSS 7.8 (high), 2013-11-06: GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010…
CVE-2013-3129 - CVSS 7.8 (high), 2013-07-10: Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and…
CVE-2013-1302 - CVSS 9.3 (critical), 2013-05-15: Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to…
CVE-2012-2520 - CVSS 4.3 (medium), 2012-10-09: Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint…
CVE-2012-1858 - CVSS 4.3 (medium), 2012-06-12: The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not…
CVE-2012-1849 - CVSS 9.3 (critical), 2012-06-12: Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in…