Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:skype_for_business_server_subscription_edition:*:cu1:*:*:*:*:*:*

part: a version: * update: cu1

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductSkype For Business Server Subscription Edition (47343c33-7a70-5084-a43d-525fe27d59a2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-69646 vulnerable 2026-09-16 04:34:19.162997 Skype for Business Spoofing Vulnerability
HIGH (8.3)
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
Published: 2026-09-08T18:33:11.399Z
Updated: 2026-09-18T20:40:29.015Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-69642 vulnerable 2026-09-16 04:34:18.891463 Skype for Business Spoofing Vulnerability
MEDIUM (6.5)
Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-09-08T18:33:10.840Z
Updated: 2026-09-18T20:40:28.432Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66302 vulnerable 2026-09-16 04:32:55.329627 Skype for Business Remote Code Execution Vulnerability
CRITICAL (9.8)
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
Published: 2026-09-08T18:30:35.349Z
Updated: 2026-09-18T20:37:51.983Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66307 vulnerable 2026-09-16 04:32:55.175920 Skype for Business and Lync Denial of Service Vulnerability
HIGH (7.5)
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
Published: 2026-09-08T18:39:44.434Z
Updated: 2026-09-18T20:47:06.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66303 vulnerable 2026-09-16 04:32:55.144982 Skype for Business and Lync Denial of Service Vulnerability
MEDIUM (6.5)
Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.
Published: 2026-09-08T18:39:43.900Z
Updated: 2026-09-18T20:47:05.887Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-66305 vulnerable 2026-09-16 04:32:54.939785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-63523 vulnerable 2026-09-16 04:32:49.693613 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.