PatchTheCVE: skype for business serverhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2026-69646: Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perfhttps://patchthecve.com/cve/CVE-2026-69646.htmlhttps://patchthecve.com/cve/CVE-2026-69646.htmlWed, 16 Sep 2026 19:26:34 +0000HIGH 8.3: Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.CVE-2026-69642: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allhttps://patchthecve.com/cve/CVE-2026-69642.htmlhttps://patchthecve.com/cve/CVE-2026-69642.htmlWed, 16 Sep 2026 19:26:02 +0000MEDIUM 6.5: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.CVE-2026-66308: Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.https://patchthecve.com/cve/CVE-2026-66308.htmlhttps://patchthecve.com/cve/CVE-2026-66308.htmlWed, 16 Sep 2026 19:25:08 +0000MEDIUM 6.5: Out-of-bounds read in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66307: Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service ohttps://patchthecve.com/cve/CVE-2026-66307.htmlhttps://patchthecve.com/cve/CVE-2026-66307.htmlWed, 16 Sep 2026 19:24:44 +0000HIGH 7.5: Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.CVE-2026-66306: Generation of error message containing sensitive information in Skype for Business allows an unauthorized attahttps://patchthecve.com/cve/CVE-2026-66306.htmlhttps://patchthecve.com/cve/CVE-2026-66306.htmlWed, 16 Sep 2026 19:24:24 +0000MEDIUM 6.5: Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-66305: Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing overhttps://patchthecve.com/cve/CVE-2026-66305.htmlhttps://patchthecve.com/cve/CVE-2026-66305.htmlWed, 16 Sep 2026 19:24:00 +0000HIGH 7.1: Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.CVE-2026-66304: Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose informatihttps://patchthecve.com/cve/CVE-2026-66304.htmlhttps://patchthecve.com/cve/CVE-2026-66304.htmlWed, 16 Sep 2026 19:23:28 +0000HIGH 7.5: Server-side request forgery (ssrf) in Skype for Business allows an unauthorized attacker to disclose information over a network.CVE-2026-66303: Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.https://patchthecve.com/cve/CVE-2026-66303.htmlhttps://patchthecve.com/cve/CVE-2026-66303.htmlWed, 16 Sep 2026 19:23:02 +0000MEDIUM 6.5: Null pointer dereference in Skype for Business allows an authorized attacker to deny service over a network.CVE-2026-66302: External control of file name or path in Skype for Business allows an unauthorized attacker to execute code ovhttps://patchthecve.com/cve/CVE-2026-66302.htmlhttps://patchthecve.com/cve/CVE-2026-66302.htmlWed, 16 Sep 2026 19:22:34 +0000CRITICAL 9.8: External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.CVE-2026-63523: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allhttps://patchthecve.com/cve/CVE-2026-63523.htmlhttps://patchthecve.com/cve/CVE-2026-63523.htmlWed, 16 Sep 2026 19:21:56 +0000MEDIUM 6.5: Improper neutralization of input during web page generation ('cross-site scripting') in Skype for Business allows an unauthorized attacker to perform spoofing over a network.