skype_for_business_server_subscription_edition_cu1 vulnerabilities
CVEs whose affected-version data names the skype_for_business_server_subscription_edition_cu1 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-85873Medium· 6.5Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
▾ SunlitMicrosoft · Skype for Business Server 2015 CU13EPSS 0.96%via NVD
CVE-2026-83746High· 8.1Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
▾ TwilightMicrosoft · Skype for Business Server 2015 CU13EPSS 1.1%via NVD
CVE-2026-70297High· 8.8Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
▾ TwilightMicrosoft · Skype for Business Server 2015 CU13EPSS 1.2%via NVD