GCVE - cpe:2.3:a:microsoft:skype_for_business_server:2019:cumulative_update_8

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:skype_for_business_server:2019:cumulative_update_8_hotfix1:*:*:*:*:*:*

part: a version: 2019 update: cumulative_update_8_hotfix1

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Skype For Business Server (`38f311a5-49a0-5383-ae50-7d5de0bae677`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-66306`	vulnerable	2026-11-03 10:15:56.322860	Skype for Business Information Disclosure Vulnerability MEDIUM (6.5) Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network. Published: 2026-09-08T18:30:36.021Z Updated: 2026-11-10T21:29:00.935Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-66304`	vulnerable	2026-11-03 10:15:55.865920	Skype for Business Information Disclosure Vulnerability HIGH (7.5) Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network. Published: 2026-09-08T18:30:33.883Z Updated: 2026-11-10T21:28:59.733Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2026-66308`	vulnerable	2026-11-03 10:15:55.777999	Skype for Business and Lync Denial of Service Vulnerability MEDIUM (6.5) Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. Published: 2026-09-08T18:30:36.611Z Updated: 2026-11-10T21:29:01.648Z Open on db.gcve.eu Reference links https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66308	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.