Known vulnerabilities in Microsoft Lync 2010

Vendor: Microsoft
Version: 2010
Software CPE: cpe:2.3:a:microsoft:microsoft_lync:*:*:*:*:*:*:*:*
Total vulnerabilities: 24
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Microsoft Lync version 2010 Microsoft Lync 2010 is affected by 24 vulnerabilities: 2 critical, 13 high, 3 medium, 6 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU8303 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8676
CWE-200 Low
No
No
- 12.09.2017 SB2017091220
#VU8307 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8695
CWE-200 Medium
No
No
- 12.09.2017 SB2017091219
#VU8316 - Memory corruption
CVE-2017-8696
CWE-119 High
No
No
- 12.09.2017 SB2017091223
#VU6060 - Memory corruption
CVE-2017-0108
CWE-119 High
Public exploit available
No
- 14.03.2017 SB2017031427
SB2017031501
SB2017031502
and 4 more
#VU6045 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0073
CWE-200 Low
No
No
- 14.03.2017 SB2017031501
SB2017031502
SB2017031503
and 3 more
#VU6042 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0060
CWE-200 Low
Public exploit available
No
- 14.03.2017 SB2017031501
SB2017031502
SB2017031503
and 3 more
#VU5664 - Improper input validation
CVE-2015-2463
CWE-20 High
Public exploit available
No
- 08.02.2017 SB2015081103
SB2015081106
#VU5663 - Improper input validation
CVE-2015-2456
CWE-20 High
Public exploit available
No
- 08.02.2017 SB2015081103
SB2015081106
#VU5662 - Improper input validation
CVE-2015-2455
CWE-20 High
Public exploit available
No
- 08.02.2017 SB2015081103
SB2015081106
#VU5661 - Improper input validation
CVE-2015-2435
CWE-20 High
No
No
- 08.02.2017 SB2015081103
SB2015081106
#VU5570 - Memory corruption
CVE-2015-2510
CWE-119 High
Public exploit available
No
- 01.02.2017 SB2015090802
SB2015090806
#VU965 - Memory corruption
CVE-2016-3396
CWE-119 High
No
No
- 13.10.2016 SB2016101102
SB2016101118
#VU963 - Memory corruption
CVE-2016-3393
CWE-119 Critical
No
Exploited
- 13.10.2016 SB2016101102
SB2016121332
#VU961 - Missing release of memory after effective lifetime
CVE-2016-3263
CWE-401 Low
No
No
- 13.10.2016 SB2016101102
SB2016110820
#VU960 - Missing release of memory after effective lifetime
CVE-2016-3262
CWE-401 Low
No
No
- 13.10.2016 SB2016101102
SB2016110819
#VU959 - Missing release of memory after effective lifetime
CVE-2016-3209
CWE-401 Low
Public exploit available
No
- 11.10.2016 SB2016101102
SB2016110822
#VU975 - Memory corruption
CVE-2016-7182
CWE-119 Medium
Public exploit available
No
- 11.10.2016 SB2016101102
SB2016121334
#VU286 - Memory corruption
CVE-2016-3304
CWE-119 High
Public exploit available
No
- 10.08.2016 SB2016081003
SB2016080910
SB2016080931
#VU285 - Memory corruption
CVE-2016-3303
CWE-119 High
Public exploit available
No
- 10.08.2016 SB2016081003
SB2016080909
SB2016080931
#VU284 - Memory corruption
CVE-2016-3301
CWE-119 High
Public exploit available
No
- 10.08.2016 SB2016081003
SB2016080908
SB2016080931


Showing elements 1 - 20 out of 24