CVE-2020-1025
- EPSS 12.89%
- Published 14.07.2020 23:15:11
- Last modified 21.11.2024 05:09:35
An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token validation. An attacker who successfully exploited the vulnerability could bypass authentication and achieve i...
CVE-2019-1209
- EPSS 13.82%
- Published 11.09.2019 22:15:14
- Last modified 21.11.2024 04:36:14
An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
CVE-2019-1084
- EPSS 7.82%
- Published 15.07.2019 19:15:17
- Last modified 21.11.2024 04:35:59
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, w...
CVE-2018-8546
- EPSS 10.95%
- Published 14.11.2018 01:29:00
- Last modified 21.11.2024 04:14:01
A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype.
CVE-2018-8311
- EPSS 23.58%
- Published 11.07.2018 00:29:02
- Last modified 21.11.2024 04:13:35
A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microso...
CVE-2018-8238
- EPSS 5.26%
- Published 11.07.2018 00:29:00
- Last modified 21.11.2024 04:13:28
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.
CVE-2017-11786
- EPSS 11.49%
- Published 13.10.2017 13:29:00
- Last modified 20.04.2025 01:37:25
Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevatio...
CVE-2017-8696
- EPSS 21.46%
- Published 13.09.2017 01:29:10
- Last modified 20.04.2025 01:37:25
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 200...
CVE-2017-8695
- EPSS 25.67%
- Published 13.09.2017 01:29:10
- Last modified 20.04.2025 01:37:25
Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office ...
CVE-2017-8676
- EPSS 2.78%
- Published 13.09.2017 01:29:09
- Last modified 20.04.2025 01:37:25
The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010...