Known vulnerabilities in Skype for Business 2016

Vendor: Microsoft
Software: Skype for Business
Version: 2016
Software CPE: cpe:2.3:a:microsoft:skype_for_business:*:*:*:*:*:*:*:*
Website: https://www.microsoft.com
Total vulnerabilities: 18
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Skype for Business version 2016 Skype for Business 2016 is affected by 18 vulnerabilities: 10 high, 2 medium, 6 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86485 - Improper input validation
CVE-2024-20673		 CWE-20 High
No
No
 - 13.02.2024 SB2024021382
#VU19080 - Improper input validation
CVE-2019-1084		 CWE-20 Low
No
No
 - 10.07.2019 SB2019071001
#VU15848 - Improper input validation
CVE-2018-8546		 CWE-20 Low
No
No
 - 13.11.2018 SB2018111317
#VU13787 - Memory corruption
CVE-2018-8311		 CWE-119 High
No
No
 - 10.07.2018 SB2018071022
#VU13789 - Improper input validation
CVE-2018-8238		 CWE-20 Medium
No
No
 - 10.07.2018 SB2018071022
#VU8757 - Permissions, Privileges, and Access Controls
CVE-2017-11786		 CWE-264 Low
No
No
 - 10.10.2017 SB2017101004
SB2017101020
#VU8303 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8676		 CWE-200 Low
No
No
 - 12.09.2017 SB2017091220
#VU8307 - Exposure of sensitive information to an unauthorized actor
CVE-2017-8695		 CWE-200 Medium
No
No
 - 12.09.2017 SB2017091219
#VU8316 - Memory corruption
CVE-2017-8696		 CWE-119 High
No
No
 - 12.09.2017 SB2017091223
#VU6456 - Memory corruption
CVE-2017-0281		 CWE-119 High
No
No
 - 09.05.2017 SB2017050906
#VU6060 - Memory corruption
CVE-2017-0108		 CWE-119 High
Public exploit available
No
 - 14.03.2017 SB2017031427
SB2017031501
SB2017031502
and 4 more
#VU6045 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0073		 CWE-200 Low
No
No
 - 14.03.2017 SB2017031501
SB2017031502
SB2017031503
and 3 more
#VU6042 - Exposure of sensitive information to an unauthorized actor
CVE-2017-0060		 CWE-200 Low
Public exploit available
No
 - 14.03.2017 SB2017031501
SB2017031502
SB2017031503
and 3 more
#VU5570 - Memory corruption
CVE-2015-2510		 CWE-119 High
Public exploit available
No
 - 01.02.2017 SB2015090802
SB2015090806
#VU286 - Memory corruption
CVE-2016-3304		 CWE-119 High
Public exploit available
No
 - 10.08.2016 SB2016081003
SB2016080910
SB2016080931
#VU285 - Memory corruption
CVE-2016-3303		 CWE-119 High
Public exploit available
No
 - 10.08.2016 SB2016081003
SB2016080909
SB2016080931
#VU284 - Memory corruption
CVE-2016-3301		 CWE-119 High
Public exploit available
No
 - 10.08.2016 SB2016081003
SB2016080908
SB2016080931
#VU5059 - Memory corruption
CVE-2016-0145		 CWE-119 High
Public exploit available
No
 - 12.04.2016 SB2016041203
SB2016041901