fr Sign in

7.2 High

CVE-2022-33633 Skype for Business and Lync Remote Code Execution Vulnerability

Description

Skype for Business and Lync Remote Code Execution Vulnerability

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Lync Server 2013 CU10 8308.0	8308.0 → < 8308.1198	8308.1198
Skype for Business Server 2015 CU12 9319.0	9319.0 → < 9319.634	9319.634
Skype for Business Server 2019 CU6 2046.0	2046.0 → < 2046.404	2046.404

References

Skype for Business and Lync Remote Code Execution Vulnerability msrc.microsoft.com

Timeline

Published July 12, 2022
Last modified July 8, 2025

The 4 CVEs of Microsoft Lync Server 2013 CU10 →

CVE-2022-26911 Skype for Business Information Disclosure Vulnerability 6.5 Medium CVE-2021-26422 Skype for Business and Lync Remote Code Execution Vulnerability 7.2 High CVE-2021-26421 Skype for Business and Lync Spoofing Vulnerability 6.5 Medium

Track this CVE