GCVE - cpe:2.3:a:microsoft:microsoft_lync:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:microsoft_lync:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Microsoft Lync (`ff73edb9-04c0-5c6b-82cf-3bb8420330a2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-1084`	vulnerable	2026-06-08 05:13:24.754160	Details available An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'. Published: 2019-07-15T18:56:21.000Z Updated: 2024-08-04T18:06:31.581Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1084	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8546`	vulnerable	2026-06-08 05:12:06.130471	Details available A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype. Published: 2018-11-14T01:00:00.000Z Updated: 2024-08-05T07:02:25.364Z Open on db.gcve.eu Reference links https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8546 http://www.securityfocus.com/bid/105802 http://www.securitytracker.com/id/1042125	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8474`	vulnerable	2026-06-08 05:12:06.006207	Details available A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync. Published: 2018-09-13T00:00:00.000Z Updated: 2024-08-05T06:54:36.655Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1041633 http://www.securityfocus.com/bid/105268 https://www.exploit-db.com/exploits/45936/ https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8311`	vulnerable	2026-06-08 05:12:05.612867	Details available A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:54:35.227Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104624 http://www.securitytracker.com/id/1041259 http://www.securitytracker.com/id/1041260 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-8238`	vulnerable	2026-06-08 05:12:05.471810	Details available A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync. Published: 2018-07-11T00:00:00.000Z Updated: 2024-08-05T06:46:13.830Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/104619 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.