Microsoft Skype
6 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2019-0932 | 8.35 when installed on Android Devices | An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'. | MEDIUM 5.9 | 4.9 % | ||
| CVE-2019-0624 | Business Server 2015 CU 8 | A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for | MEDIUM 5.4 | 1.5 % | ||
| CVE-2019-0622 | 8.35 when installed on Android Devices | An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype | MEDIUM 4.6 | 2.0 % | ||
| CVE-2018-8546 | Business 2016 (32-bit) ; Business 2016 (64-bit) ; Business 2016 Basic (32-bit) ; … | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This aff | MEDIUM 5.9 | 5.5 % | ||
| CVE-2018-8311 | Business 2016 (32-bit) ; Business 2016 (64-bit) | A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted | HIGH 8.8 | 17 % | ||
| CVE-2018-8238 | Business 2016 (32-bit) ; Business 2016 (64-bit) | A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka | HIGH 7.8 | 6.0 % |