Known Vulnerabilities for Skype by Microsoft
Listed below are 8 of the newest known vulnerabilities associated with "Skype" by "Microsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-69646 json | Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing ov... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-69642 json | Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthor... | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-66308 json | Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network. | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-66307 json | Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network. | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-66306 json | Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclos... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-66305 json | Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network. | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-66304 json | Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a netwo... | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-66303 json | Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network. | Not Provided | 2026-09-08 | 2026-09-08 |
| CVE-2026-66302 json | External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. | Not Provided | 2026-09-08 | 2026-09-09 |
| CVE-2026-63523 json | Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthor... | Not Provided | 2026-09-08 | 2026-09-11 |