CVE-2026-66306: falha de média gravidade em Microsoft Skype for Business Server 2015 CU13
Skype for Business Information Disclosure Vulnerability
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.9%
Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
Produtos afetados
Microsoft · Skype for Business Server 2015 CU13Microsoft · Skype for Business Server 2019 CU8Microsoft · Skype for Business Server Subscription Edition CU1CVEs relacionadas — Microsoft Skype for Business Server 2015 CU13
No mesmo produto, das mais perigosas para as menos.
CVE-2023-41763MEDIUMSkype for Business Elevation of Privilege VulnerabilityEPSS 90.3%KEVCVE-2023-36780HIGHSkype for Business Remote Code Execution VulnerabilityEPSS 2.7%CVE-2023-36786HIGHSkype for Business Remote Code Execution VulnerabilityEPSS 2.6%CVE-2023-36789HIGHSkype for Business Remote Code Execution VulnerabilityEPSS 2.5%CVE-2026-66307HIGHSkype for Business and Lync Denial of Service VulnerabilityEPSS 1.2%CVE-2026-70297HIGHSkype for Business Remote Code Execution VulnerabilityEPSS 1.2%