Skype For Business Server vulnerabilities | LiveThreat CVE Feed

Product

Skype For Business Server

by Microsoft · last CVE Sep 8, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities24 In the news0 Timeline

Severity mix

Critical 1High 8Medium 13Low 0

Severity

All severities24 Critical1 High8 Medium13 Low0

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Skype For Business Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-41763 In wildKEV	5.3	91%	Oct 10	Skype for Business Elevation of Privilege Vulnerability Affected: 2015; 2019
CVE-2026-66302	9.8	1%	Sep 8	Skype for Business Remote Code Execution Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-69646	8.3	0%	Sep 8	Skype for Business Spoofing Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-66307	7.5	1%	Sep 8	Skype for Business and Lync Denial of Service Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-66304	7.5	1%	Sep 8	Skype for Business Information Disclosure Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2023-36789	7.2	3%	Oct 10	Skype for Business Remote Code Execution Vulnerability Affected: 2015; 2019
CVE-2023-36786	7.2	3%	Oct 10	Skype for Business Remote Code Execution Vulnerability Affected: 2015; 2019
CVE-2023-36780	7.2	3%	Oct 10	Skype for Business Remote Code Execution Vulnerability Affected: 2015; 2019
CVE-2021-26422	7.2	2%	May 11	Skype for Business and Lync Remote Code Execution Vulnerability Affected: 2015; 2019
CVE-2026-66305	7.1	1%	Sep 8	Skype for Business Spoofing Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-66303	6.5	1%	Sep 8	Skype for Business and Lync Denial of Service Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-66308	6.5	1%	Sep 8	Skype for Business and Lync Denial of Service Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-66306	6.5	1%	Sep 8	Skype for Business Information Disclosure Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2022-26911	6.5	4%	Apr 15	Skype for Business Information Disclosure Vulnerability Affected: 2015; 2019
CVE-2021-26421	6.5	1%	May 11	Skype for Business and Lync Spoofing Vulnerability Affected: 2015
CVE-2021-24099	6.5	3%	Feb 25	Skype for Business and Lync Denial of Service Vulnerability Affected: 2015; 2019
CVE-2021-24073	6.5	2%	Feb 25	Skype for Business and Lync Spoofing Vulnerability Affected: 2015
CVE-2026-69642	6.1	0%	Sep 8	Skype for Business Spoofing Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2026-63523	6.1	1%	Sep 8	Skype for Business Spoofing Vulnerability Affected: 2015; 2015; 2019; 2019; 2019
CVE-2019-0798	6.1	2%	Apr 9	A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing… Affected: 2015
CVE-2024-20695	5.7	1%	Feb 13	Skype for Business Information Disclosure Vulnerability Affected: 2019
CVE-2022-26910	5.3	2%	Apr 15	Skype for Business and Lync Spoofing Vulnerability Affected: 2015; 2019
CVE-2015-2536	–	9%	Sep 9	Cross-site scripting (XSS) vulnerability in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web script or HTML via a… Affected: 2015
CVE-2015-2531	–	11%	Sep 9	Cross-site scripting (XSS) vulnerability in the jQuery engine in Microsoft Lync Server 2013 and Skype for Business Server 2015 allows remote attackers to inject arbitrary web… Affected: 2015