Skype For Business (Microsoft) - vulnerabilities (CVEs)

33 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2024-02-13. Vendor: Microsoft.

CVEs of Skype For Business

CVE-2024-20673 - CVSS 7.8 (high), 2024-02-13: Microsoft Office Remote Code Execution Vulnerability
CVE-2022-33633 - CVSS 7.2 (high), 2022-07-12: Skype for Business and Lync Remote Code Execution Vulnerability
CVE-2020-1025 - CVSS 9.8 (critical), 2020-07-14: An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An…
CVE-2019-1490 - CVSS 5.4 (medium), 2019-12-10: A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server…
CVE-2019-1084 - CVSS 6.5 (medium), 2019-07-15: An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated…
CVE-2019-0624 - CVSS 5.4 (medium), 2019-01-17: A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015…
CVE-2018-8546 - CVSS 5.9 (medium), 2018-11-14: A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365…
CVE-2018-8311 - CVSS 8.8 (high), 2018-07-11: A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka…
CVE-2018-8238 - CVSS 7.8 (high), 2018-07-11: A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for…
CVE-2017-11786 - CVSS 8.8 (high), 2017-10-13: Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due…
CVE-2017-8696 - CVSS 7.5 (high), 2017-09-13: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016;…
CVE-2017-8695 - CVSS 5.3 (medium), 2017-09-13: Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10…
CVE-2017-8676 - CVSS 3.3 (low), 2017-09-13: The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2017-8527 - CVSS 8.8 (high), 2017-06-15: Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…
CVE-2017-0283 - CVSS 8.8 (high), 2017-06-15: Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607,…
CVE-2017-0281 - CVSS 7.8 (high), 2017-05-12: Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1,…
CVE-2017-0108 - CVSS 7.8 (high), 2017-03-17: The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007;…
CVE-2017-0073 - CVSS 4.3 (medium), 2017-03-17: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold…
CVE-2017-0060 - CVSS 5.5 (medium), 2017-03-17: The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold…
CVE-2016-7182 - CVSS 9.8 (critical), 2016-10-14: The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2016-3396 - CVSS 7.8 (high), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3263 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3262 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3209 - CVSS 5.5 (medium), 2016-10-14: Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server…
CVE-2016-3304 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer,…
CVE-2016-3303 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer,…
CVE-2016-3301 - CVSS 7.8 (high), 2016-08-09: The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;…
CVE-2016-0145 - CVSS 8.8 (high), 2016-04-12: The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT…
CVE-2015-6108 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold…
CVE-2015-6107 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold…
CVE-2015-6106 - CVSS 9.3 (critical), 2015-12-09: The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync…
CVE-2015-6061 - CVSS 4.3 (medium), 2015-11-11: Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote…
CVE-2015-2503 - CVSS 9.3 (critical), 2015-11-11: Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3,…