CVE-2026-69646

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

CVE-2026-66307

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

CVE-2026-66306

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network...

CVE-2026-66305

Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network...

CVE-2026-66308

Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-66304

Server-side request forgery ssrf in Skype for Business allows an unauthorized attacker to disclose information over a network...

CVE-2026-66303

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-28616

In Setup Wizard, there is a possible way to force connection to a malicious network due to confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-73941

Integer underflow wrap or wraparound in Skype for Business allows an unauthorized attacker to deny service over a network...

CVE-2026-66307

An integer underflow (wrap/wraparound) vulnerability in Skype for Business Server allows an unauthorized, network-based attacker to cause a denial of service (CVSS 3.1: 7.5 HIGH , high availability impact). The affected products are Skype for Business Server Subscription Edition , Server 2019 , a...

CVE-2026-66303

CVE-2026-66303 is a null pointer dereference in Skype for Business that allows an authorized attacker (low privileges required) to cause a denial of service over the network. The affected products are Skype for Business Server Subscription Edition , Skype for Business Server 2019 , and Skype for ...

EUVD-2026-73940

Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network...

CVE-2026-69646

CVE-2026-69646 is an improper verification of cryptographic signature vulnerability in Skype for Business Server (Subscription Edition, 2015, and 2019). An unauthorized attacker on an adjacent network can perform spoofing without requiring privileges or user interaction. The CVSS 3.1 score is 8.3...

EUVD-2026-73939

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network...

CVE-2026-69642

CVE-2026-69642 is a cross-site scripting (XSS) vulnerability in Skype for Business Server (Subscription Edition, 2019, and 2015), caused by improper input neutralization during web page generation. An unauthorized attacker can perform spoofing over a network with no user interaction or privileges...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

GHSA-4QHR-QF46-FCRX Duplicate Advisory: Microsoft Security Advisory CVE-2026-71328 – .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-63gh-g2x5-x69v. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

GHSA-Q72M-F2R4-W4CW Duplicate Advisory: Microsoft Security Advisory CVE-2026-69522 – .NET and Visual Studio Remote Code Execution Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2j8r-3c22-8565. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to execute code over a network...

Duplicate Advisory: Microsoft Security Advisory CVE-2026-69439 – .NET and Visual Studio Elevation of Privilege Vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-527h-q9f6-p7qx. This link is maintained to preserve external references. Original Description Heap-based buffer overflow in .NET and Visual Studio allows an unauthorized attacker to elevate privileges over a...