Skype For Business Server 2019 (Microsoft) - vulnerabilities (CVEs)
13 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-13. Vendor: Microsoft.
CVEs of Skype For Business Server 2019
- CVE-2026-83746 - CVSS 8.1 (high), 2026-10-13: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
- CVE-2026-70297 - CVSS 8.8 (high), 2026-10-13: Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
- CVE-2026-85873 - CVSS 6.5 (medium), 2026-10-13: Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
- CVE-2026-66307 - CVSS 7.5 (high), 2026-09-08: Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
- CVE-2026-66303 - CVSS 6.5 (medium), 2026-09-08: Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
- CVE-2026-69646 - CVSS 8.3 (high), 2026-09-08: Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-69642 - CVSS 6.5 (medium), 2026-09-08: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing…
- CVE-2026-66305 - CVSS 7.1 (high), 2026-09-08: Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
- CVE-2026-63523 - CVSS 6.5 (medium), 2026-09-08: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing…
- CVE-2026-66308 - CVSS 6.5 (medium), 2026-09-08: Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
- CVE-2026-66306 - CVSS 6.5 (medium), 2026-09-08: Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
- CVE-2026-66302 - CVSS 9.8 (critical), 2026-09-08: External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
- CVE-2026-66304 - CVSS 7.5 (high), 2026-09-08: Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
