Skype for Business vulnerabilities | LiveThreat CVE Feed

Product

Skype for Business

by Microsoft · last CVE Feb 13, 2024

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 2High 15Medium 11Low 1

Severity

All severities34 Critical2 High15 Medium11 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Skype for Business to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-41763 In wildKEV	5.3	91%	Oct 10	Skype for Business Elevation of Privilege Vulnerability Affected: All versions, or not specified
CVE-2020-1025	9.8	6%	Jul 14	An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation Affected: 2015; 2019
CVE-2016-7182	9.8	30%	Oct 14	The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10… Affected: 2016
CVE-2018-8311	8.8	17%	Jul 11	A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution… Affected: All versions, or not specified
CVE-2017-11786	8.8	9%	Oct 13	Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for… Affected: 2016
CVE-2017-8527	8.8	19%	Jun 15	Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server… Affected: 2016
CVE-2017-0283	8.8	39%	Jun 15	Uniscribe in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, Windows Server 2016,… Affected: 2016
CVE-2016-0145	8.8	41%	Apr 12	The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold… Affected: 2016
CVE-2024-20673	7.8	1%	Feb 13	Microsoft Office Remote Code Execution Vulnerability Affected: 2016
CVE-2018-8238	7.8	6%	Jul 11	A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security… Affected: 2016
CVE-2017-0281	7.8	16%	May 12	Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2016, Office Online Server 2016, Office Web Apps 2010 SP2,Office Web Apps 2013 SP1, Project Server 2013 SP1,… Affected: 2016
CVE-2017-0108	7.8	50%	Mar 17	The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5;… Affected: 2016
CVE-2016-3396	7.8	24%	Oct 14	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: 2016
CVE-2016-3304	7.8	51%	Aug 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016,… Affected: 2016
CVE-2016-3303	7.8	51%	Aug 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016,… Affected: 2016
CVE-2016-3301	7.8	44%	Aug 9	The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows… Affected: 2016
CVE-2017-8696	7.5	14%	Sep 13	Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business… Affected: 2016
CVE-2022-33633	7.2	2%	Jul 12	Skype for Business and Lync Remote Code Execution Vulnerability Affected: 2015; 2019
CVE-2019-1084	6.5	5%	Jul 15	An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters Affected: 2016
CVE-2018-8546	5.9	5%	Nov 14	A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft… Affected: 2016
CVE-2017-0060	5.5	16%	Mar 17	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: 2016
CVE-2016-3263	5.5	32%	Oct 14	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: 2016
CVE-2016-3262	5.5	32%	Oct 14	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: 2016
CVE-2016-3209	5.5	54%	Oct 14	Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2;… Affected: 2016
CVE-2019-1490	5.4	2%	Dec 10	A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability' Affected: 2019
CVE-2019-0624	5.4	1%	Jan 17	A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoofing Vulnerability."… Affected: 2015
CVE-2017-8695	5.3	10%	Sep 13	Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703,… Affected: 2016
CVE-2017-0073	4.3	33%	Mar 17	The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: 2016
CVE-2017-8676	3.3	14%	Sep 13	The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows… Affected: 2016
CVE-2015-6108	–	26%	Dec 9	The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT… Affected: 2016
CVE-2015-6107	–	18%	Dec 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT… Affected: 2016
CVE-2015-6106	–	17%	Dec 9	The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, Lync 2010, Lync 2013 SP1,… Affected: 2016
CVE-2015-6061	–	13%	Nov 11	Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject… Affected: 2016
CVE-2015-2503	–	17%	Nov 11	Microsoft Access 2007 SP3, Excel 2007 SP3, InfoPath 2007 SP3, OneNote 2007 SP3, PowerPoint 2007 SP3, Project 2007 SP3, Publisher 2007 SP3, Visio 2007 SP3, Word 2007 SP3, Office… Affected: 2016