← Back

Skype For Business Server Subscription Edition

skype_for_business_server_subscription_edition

Vendor: Microsoft • 10 CVEs

CVEs (10)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
8.3 HIGH· v3
N/A· v2
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.1 HIGH· v3
N/A· v2
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
7.5 HIGH· v3
N/A· v2
Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
6.5 MEDIUM· v3
N/A· v2
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
9.8 CRITICAL· v3
N/A· v2
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
1Microsoft
2Skype For Business Server
Skype For Business Server Subscription Edition
Sep 16, 2026
Sep 8, 2026
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.