7.5
High
CVE-2026-66307 Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a…
Description
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Skype for Business Server 2015 CU13 6.0 | earliest → < 6.0.9319.885 | 6.0.9319.885 |
| Skype for Business Server 2019 CU8 7.0 | earliest → < 7.0.2046.569 | 7.0.2046.569 |
| Skype for Business Server Subscription Edition CU1 7.0 | earliest → < 7.0.2046.879 | 7.0.2046.879 |
References
- Skype for Business and Lync Denial of Service Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Skype for Business Server 2015 CU13
The 17 CVEs of Skype for Business Server 2015 CU13 →
CVE-2026-70297
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…
8.8
High
CVE-2026-85873
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over…
6.5
Medium
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…
8.1
High
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network
6.5
Medium