CVE-2026-70297: Skype for Business Server 2015 CU13 9319.0 to before 6.0.9319.886; +2 more affected products

Affected technology

Skype for Business Server 2015 CU13 · 9319.0 to before 6.0.9319.886
Microsoft

Skype for Business Server 2019 CU8 · 2046.0 to before 7.0.2046.583
Microsoft

Skype for Business Server Subscription Edition CU1 · 2046.0 to before 7.0.2046.889
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authorized attacker can execute code over a network. Vendor/CNA’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high.