Microsoft Lync
by Microsoft
CVEs (3)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-70297 | Hig | 0.57 | 8.8 | — | Oct 13, 2026 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network. | ||
| CVE-2026-83746 | Hig | 0.53 | 8.1 | — | Oct 13, 2026 | Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. | ||
| CVE-2026-85873 | Med | 0.42 | 6.5 | — | Oct 13, 2026 | Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. |
- risk 0.57cvss 8.8epss —
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
- risk 0.53cvss 8.1epss —
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
- risk 0.42cvss 6.5epss —
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.