5.3
Medium
Exploited
CVE-2023-41763 Microsoft Skype for Business Privilege Escalation Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Not observed so far
Weakness
CWE-918
Description
Skype for Business Elevation of Privilege Vulnerability
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Skype for Business Server 2015 CU13 6.0 | earliest → < 6.0.9319.869 | 6.0.9319.869 |
| Skype for Business Server 2019 CU7 7.0 | earliest → < 7.0.246.530 | 7.0.246.530 |
References
- Skype for Business Elevation of Privilege Vulnerability msrc.microsoft.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified
Other CVEs of Skype for Business Server 2015 CU13
The 17 CVEs of Skype for Business Server 2015 CU13 →
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…
8.1
High
CVE-2026-85873
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over…
6.5
Medium
CVE-2026-70297
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…
8.8
High
CVE-2026-66307
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a…
7.5
High