Microsoft Skype
12 CVEs affecting Microsoft Skype. Latest disclosed: 2021-01-11. Critical: 1, High: 6.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-6517 | Critical | 9.8 | 2017-03-23 | Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This… |
CVE-2018-8311 | High | 8.8 | 2018-07-11 | A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remot… |
CVE-2017-9948 | High | 8.8 | 2017-06-26 | A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP… |
CVE-2018-8238 | High | 7.8 | 2018-07-11 | A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Busines… |
CVE-2018-0595 | High | 7.8 | 2018-06-26 | Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified direct… |
CVE-2018-0594 | High | 7.8 | 2018-06-26 | Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
CVE-2016-5720 | High | 7.8 | 2017-01-23 | Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan ho… |
CVE-2019-0932 | Medium | 5.9 | 2019-05-16 | An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'. |
CVE-2018-8546 | Medium | 5.9 | 2018-11-14 | A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 Pro… |
CVE-2019-0624 | Medium | 5.4 | 2019-01-17 | A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoo… |
CVE-2019-0622 | Medium | 4.6 | 2019-01-08 | An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevati… |
CVE-2020-24003 | Low | 3.3 | 2021-01-11 | Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain… |