Skype (Microsoft) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2021-01-11. Vendor: Microsoft.
CVEs of Skype
- CVE-2020-24003 - CVSS 3.3 (low), 2021-01-11: Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain…
- CVE-2019-0932 - CVSS 5.9 (medium), 2019-05-16: An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'.
- CVE-2019-0624 - CVSS 5.4 (medium), 2019-01-17: A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015…
- CVE-2019-0622 - CVSS 4.6 (medium), 2019-01-08: An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android…
- CVE-2018-8546 - CVSS 5.9 (medium), 2018-11-14: A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365…
- CVE-2018-8311 - CVSS 8.8 (high), 2018-07-11: A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka…
- CVE-2018-8238 - CVSS 7.8 (high), 2018-07-11: A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for…
- CVE-2018-0595 - CVSS 7.8 (high), 2018-06-26: Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified…
- CVE-2018-0594 - CVSS 7.8 (high), 2018-06-26: Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
- CVE-2017-9948 - CVSS 8.8 (high), 2017-06-26: A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP…
- CVE-2017-6517 - CVSS 9.8 (critical), 2017-03-23: Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system.…
- CVE-2016-5720 - CVSS 7.8 (high), 2017-01-23: Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan…
