CVE-2023-41763 Skype for Business Elevation of Privilege Vulnerability

🗓️ 10 Oct 2023 17:07:24Reported by microsoftType

Skype for Business Privilege Vulnerability

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2023-41763	10 Oct 202300:00	–	attackerkb
Information Security Automation	October 2023: back to Positive Technologies, Vulristics updates, Linux Patch Wednesday, Microsoft Patch Tuesday, PhysTech VM lecture	5 Nov 202318:39	–	avleonov
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program lies in the lack of protection for service data, which allows attackers to disclose protected information.	16 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-41763	10 Oct 202321:10	–	circl
CISA KEV Catalog	Microsoft Skype for Business Privilege Escalation Vulnerability	10 Oct 202300:00	–	cisa_kev
CISA	CISA Adds Five Known Vulnerabilities to Catalog	10 Oct 202312:00	–	cisa
CNNVD	Microsoft Skype for Business 安全漏洞	10 Oct 202300:00	–	cnnvd
CNVD	Microsoft Skype for Business elevation of privilege vulnerability (CNVD-2023-92201)	13 Oct 202300:00	–	cnvd
CVE	CVE-2023-41763	10 Oct 202317:07	–	cve
Hacker One	MTN Group: CVE-2023-41763 Business Elevation of Privilege vulnerability on [.mtn.com]	9 Jan 202415:51	–	hackerone

[
  {
    "vendor": "Microsoft",
    "product": "Skype for Business Server 2015 CU13",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "9319.0",
        "lessThan": "6.0.9319.869",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Skype for Business Server 2019 CU7",
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "2046.0",
        "lessThan": "7.0.246.530",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]

Source	Link
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2023-41763

14 Apr 2025 22:45Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.15.3

EPSS0.16495

CWE-918