Microsoft Corporation Skype for Business
2 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-11786 | Microsoft Lync 2013 SP1 and Skype for Business 2016 | Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reu | HIGH 8.8 | 9.4 % | ||
| CVE-2017-8550 | Microsoft Office 2016 Click-to-Run (C2R) | A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype | MEDIUM 5.4 | 22 % |