CVE-2026-85873: Skype for Business Server 2015 CU13 9319.0 to before 6.0.9319.886; +3 more affected products

Affected technology

Skype for Business Server 2015 CU13 · 9319.0 to before 6.0.9319.886
Microsoft

Skype for Business Server 2019 CU8 · 2046.0 to before 7.0.2046.583
Microsoft

Skype for Business Server Subscription Edition CU1 · 2046.0 to before 7.0.2046.889
Microsoft

Skype for Business Server Subscription Edition RTM · 1.0.0 to before 7.0.2046.889
Microsoft

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required

What an attacker can do

An authorized attacker can elevate privileges over a network. Vendor/CNA’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality impact as high; integrity and availability impact as none.