Known vulnerabilities in Lync Attendee

Vendor: Microsoft
Software: Lync Attendee
Software CPE: cpe:2.3:a:microsoft:lync_attendee:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 10
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Lync Attendee Lync Attendee is affected by 10 known vulnerabilities: 1 critical, 3 high, 2 medium, 4 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8303 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8676		 CWE-200 Low
No
No
 - 12.09.2017 SB2017091220
#VU8307 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8695		 CWE-200 Medium
No
No
 - 12.09.2017 SB2017091219
#VU8316 - Memory corruption
CVE-2017-8696		 CWE-119 High
No
No
 - 12.09.2017 SB2017091223
#VU965 - Memory corruption
CVE-2016-3396		 CWE-119 High
No
No
 - 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393		 CWE-119 Critical
No
Exploited
 - 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262		 CWE-401 Low
No
No
 - 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209		 CWE-401 Low
Available
No
 - 11.10.2016 SB2016101102
SB2016110822
#VU975 - Memory corruption
CVE-2016-7182		 CWE-119 Medium
Available
No
 - 11.10.2016 SB2016101102
SB2016121334
#VU5059 - Memory corruption
CVE-2016-0145		 CWE-119 High
Available
No
 - 12.04.2016 SB2016041203
SB2016041901