Advisories · Technology

Microsoft Skype for Business Server Subscription Edition CU1.

Every CVE that names Microsoft Skype for Business Server Subscription Edition CU1 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-85873 CVE record

CVSS 6.5 Medium

Skype for Business Elevation of Privilege Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Broken access control
Not analysed yet 13 Oct 2026
CVE-2026-83746 CVE record

CVSS 8.1 High

Skype for Business Elevation of Privilege Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-70297 CVE record

CVSS 8.8 High

Skype for Business Remote Code Execution Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Path traversal
Not analysed yet 13 Oct 2026
CVE-2026-66307 CVE record

CVSS 7.5 High

Skype for Business and Lync Denial of Service Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66303 CVE record

CVSS 6.5 Medium

Skype for Business and Lync Denial of Service Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-69646 CVE record

CVSS 8.3 High

Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Weak cryptography or TLS
Not analysed yet 8 Sept 2026
CVE-2026-69642 CVE record

CVSS 6.5 Medium

Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2026
CVE-2026-66305 CVE record

CVSS 7.1 High

Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- CWE-603
Not analysed yet 8 Sept 2026
CVE-2026-63523 CVE record

CVSS 6.5 Medium

Skype for Business Spoofing Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Cross-site scripting (XSS)
Not analysed yet 8 Sept 2026
CVE-2026-66308 CVE record

CVSS 6.5 Medium

Skype for Business and Lync Denial of Service Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Memory corruption
Not analysed yet 8 Sept 2026
CVE-2026-66306 CVE record

CVSS 6.5 Medium

Skype for Business Information Disclosure Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Information disclosure
Not analysed yet 8 Sept 2026
CVE-2026-66302 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Skype for Business Remote Code Execution Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Path traversal
Not analysed yet 8 Sept 2026
CVE-2026-66304 CVE record

CVSS 7.5 High

Skype for Business Information Disclosure Vulnerability
- Microsoft Skype for Business Server 2015 CU13
- Microsoft Skype for Business Server 2019 CU8
- Server-side request forgery (SSRF)
Not analysed yet 8 Sept 2026