CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2019-0798
https://notcve.org/view.php?id=CVE-2019-0798
09 Apr 2019 — A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business and Lync Spoofing Vulnerability'. Existe una vulnerabilidad de suplantación de identidad cuando un servidor Lync o un servidor Skype for Business no sanea apropiadamente una petición especialmente creada, también se conoce como "Skype for Business and Lync Spoofing Vulnerability". • https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0798 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.9EPSS: 11%CPEs: 6EXPL: 1CVE-2018-8546 – Microsoft Skype 2015 / 2016 Denial of Service
https://notcve.org/view.php?id=CVE-2018-8546
14 Nov 2018 — A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync, Skype. Existe una vulnerabilidad de denegación de servicio (DoS) en Skype for Business. Esto también se conoce como "Microsoft Skype for Business Denial of Service Vulnerability". Esto afecta a Office 365 ProPlus, Microsoft Office, Microsoft Lync y Skype. • https://packetstorm.news/files/id/150425 •
CVSS: 7.5EPSS: 24%CPEs: 1EXPL: 2CVE-2018-8474 – Microsoft Lync for Mac 2011 - Injection Forced Browsing/Download
https://notcve.org/view.php?id=CVE-2018-8474
13 Sep 2018 — A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync. Existe una vulnerabilidad de omisión de la característica de seguridad cuando Lync for Mac 2011 no sanea correctamente mensajes especialmente manipulados. Esto también se conoce como "Lync for Mac 2011 Security Feature Bypass Vulnerability". Esto afecta a Microsoft Lync. • https://packetstorm.news/files/id/150618 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 6%CPEs: 2EXPL: 0CVE-2018-8238
https://notcve.org/view.php?id=CVE-2018-8238
11 Jul 2018 — A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync. Existe una vulnerabilidad de omisión de la característica de seguridad cuando Skype for Business o Lync no analizan correctamente los enlaces de ruta UNC compartidos mediante mensajes. Esto también se conoce como "Skype for Business and Lync Security Feature Bypass ... • http://www.securityfocus.com/bid/104619 •
CVSS: 8.8EPSS: 23%CPEs: 2EXPL: 0CVE-2018-8311
https://notcve.org/view.php?id=CVE-2018-8311
11 Jul 2018 — A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync. Existe una vulnerabilidad de ejecución remota de código cuando los clientes Skype for Business y Microsoft Lync no sanean correctamente el contenido especialmente manipulado. Esto también se conoce como "Remote Code Execution Vulnerability in Skype For ... • http://www.securityfocus.com/bid/104624 • CWE-20: Improper Input Validation •
CVSS: 9.3EPSS: 9%CPEs: 2EXPL: 0CVE-2017-11786
https://notcve.org/view.php?id=CVE-2017-11786
13 Oct 2017 — Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability." Skype for Business en Microsoft Lync 2013 SP1 y Skype for Business 2016 permiten que un atacante robe un hash de autenticación que puede reutilizarse en otro sitio, debido a la forma en la que Skype for Business gestiona las petici... • http://www.securityfocus.com/bid/101156 • CWE-294: Authentication Bypass by Capture-replay •
CVSS: 5.3EPSS: 20%CPEs: 21EXPL: 0CVE-2017-8695 – Microsoft Security Bulletin CVE Update for October, 2017
https://notcve.org/view.php?id=CVE-2017-8695
13 Sep 2017 — Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to obtain information to further compromise a user's system via a specially crafted document or an untrusted... • http://www.securityfocus.com/bid/100773 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 7.6EPSS: 21%CPEs: 13EXPL: 0CVE-2017-8696
https://notcve.org/view.php?id=CVE-2017-8696
13 Sep 2017 — Windows Uniscribe in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an attacker to execute code remotely via a specially crafted website or a specially crafted document or email attachment, aka "Microsoft Graphics Component Remote Code Execution." El componente Uniscribe de Windows en Microsoft Window... • http://www.securityfocus.com/bid/100780 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 3.3EPSS: 2%CPEs: 22EXPL: 0CVE-2017-8676 – Microsoft Windows Bitmap Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
https://notcve.org/view.php?id=CVE-2017-8676
12 Sep 2017 — The Windows Graphics Device Interface (GDI) in Microsoft Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, 1607, 1703, and Server 2016; Office 2007 SP3; Office 2010 SP2; Word Viewer; Office for Mac 2011 and 2016; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Lync 2010 Attendee; and Live Meeting 2007 Add-in and Console allows an authenticated attacker to retrieve information from a targeted system via a specially craft... • http://www.securityfocus.com/bid/100755 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.3EPSS: 28%CPEs: 18EXPL: 0CVE-2017-8527 – Microsoft Security Bulletin CVE Update for June, 2017
https://notcve.org/view.php?id=CVE-2017-8527
15 Jun 2017 — Graphics in Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows a remote code execution vulnerability due to the way it handles objects in memory, aka "Windows Graphics Remote Code Execution Vulnerability". Graphics en Windows Server 2008 SP2 y R2 SP1, Windows 7 SP1, Windows versión 8.1, Windows Server 2012 Gold y R2, Windows RT versión 8.1, Windows 10 Gold, 1511, 1607, 1703 y Windo... • http://www.securityfocus.com/bid/98933 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •