CVE-2026-66302

🗓️ 08 Sep 2026 19:18:07Reported by [email protected]Type

External file name/path control in Skype for Business allows remote code execution.

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of the Skype for Business Server’s instant messaging program, related to improper external management of file names or paths, allows a hacker to execute arbitrary code.	11 Sep 202600:00	–	bdu_fstec
Circl	CVE-2026-66302	8 Sep 202620:14	–	circl
CVE	CVE-2026-66302	8 Sep 202618:30	–	cve
Cvelist	CVE-2026-66302 Skype for Business Remote Code Execution Vulnerability	8 Sep 202618:30	–	cvelist
EUVD	EUVD-2026-74044	8 Sep 202618:30	–	euvd
Microsoft KB	Description of Security Update 1 for Microsoft Skype for Business Server SE CU1: September 8, 2026 (KB5123287)	8 Sep 202614:00	–	mskb
Microsoft KB	Description of Security Update 3 for Microsoft Skype for Business Server 2019 CU8: September 8, 2026 (KB5123300)	8 Sep 202614:00	–	mskb
Microsoft KB	Description of Security Update 3 for Microsoft Skype for Business Server 2015 CU13: September 8, 2026 (KB5123301)	8 Sep 202614:00	–	mskb
Kaspersky	KLA91268 Multiple vulnerabilities in Microsoft Office	8 Sep 202600:00	–	kaspersky
Microsoft CVE	Skype for Business Remote Code Execution Vulnerability	8 Sep 202614:00	–	mscve