8.8
Élevée
CVE-2026-70297 Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a…
Description
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Skype for Business Server 2015 CU13 6.0 | premières → < 6.0.9319.886 | 6.0.9319.886 |
| Skype for Business Server 2019 CU8 7.0 | premières → < 7.0.2046.583 | 7.0.2046.583 |
| Skype for Business Server Subscription Edition CU1 7.0 | premières → < 7.0.2046.889 | 7.0.2046.889 |
Références
- Skype for Business Remote Code Execution Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Skype for Business Server 2015 CU13
Les 17 CVE de Skype for Business Server 2015 CU13 →
CVE-2026-83746
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges…
8.1
Élevée
CVE-2026-85873
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over…
6.5
Moyenne
CVE-2026-66307
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a…
7.5
Élevée
CVE-2026-66303
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network
6.5
Moyenne