Known vulnerabilities in Skype for Business

Known vulnerabilities in Skype for Business

Vendor: Microsoft

Software: Skype for Business

Software CPE: cpe:2.3:a:microsoft:skype_for_business:*:*:*:*:*:*:*:*

Website: https://www.microsoft.com

Total vulnerabilities: 18

Public exploits: 7

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU86485 - Improper input validation CVE-2024-20673	CWE-20	High	No	No	-	13.02.2024	SB2024021382
#VU19080 - Improper input validation CVE-2019-1084	CWE-20	Low	No	No	-	10.07.2019	SB2019071001
#VU15848 - Improper input validation CVE-2018-8546	CWE-20	Low	No	No	-	13.11.2018	SB2018111317
#VU13787 - Memory corruption CVE-2018-8311	CWE-119	High	No	No	-	10.07.2018	SB2018071022
#VU13789 - Improper input validation CVE-2018-8238	CWE-20	Medium	No	No	-	10.07.2018	SB2018071022
#VU8757 - Permissions, Privileges, and Access Controls CVE-2017-11786	CWE-264	Low	No	No	-	10.10.2017	SB2017101004 SB2017101020
#VU8303 - Exposure of sensitive information to an unauthorized actor CVE-2017-8676	CWE-200	Low	No	No	-	12.09.2017	SB2017091220
#VU8307 - Exposure of sensitive information to an unauthorized actor CVE-2017-8695	CWE-200	Medium	No	No	-	12.09.2017	SB2017091219
#VU8316 - Memory corruption CVE-2017-8696	CWE-119	High	No	No	-	12.09.2017	SB2017091223
#VU6456 - Memory corruption CVE-2017-0281	CWE-119	High	No	No	-	09.05.2017	SB2017050906
#VU6060 - Memory corruption CVE-2017-0108	CWE-119	High	Available	No	-	14.03.2017	SB2017031427 SB2017031501 SB2017031502 and 4 more
#VU6045 - Exposure of sensitive information to an unauthorized actor CVE-2017-0073	CWE-200	Low	No	No	-	14.03.2017	SB2017031501 SB2017031502 SB2017031503 and 3 more
#VU6042 - Exposure of sensitive information to an unauthorized actor CVE-2017-0060	CWE-200	Low	Available	No	-	14.03.2017	SB2017031501 SB2017031502 SB2017031503 and 3 more
#VU5570 - Memory corruption CVE-2015-2510	CWE-119	High	Available	No	-	01.02.2017	SB2015090802 SB2015090806
#VU286 - Memory corruption CVE-2016-3304	CWE-119	High	Available	No	-	10.08.2016	SB2016081003 SB2016080910 SB2016080931
#VU285 - Memory corruption CVE-2016-3303	CWE-119	High	Available	No	-	10.08.2016	SB2016081003 SB2016080909 SB2016080931
#VU284 - Memory corruption CVE-2016-3301	CWE-119	High	Available	No	-	10.08.2016	SB2016081003 SB2016080908 SB2016080931
#VU5059 - Memory corruption CVE-2016-0145	CWE-119	High	Available	No	-	12.04.2016	SB2016041203 SB2016041901