MEDIUM 6.5 Microsoft
CVE-2026-66303
Skype for Business and Lync Denial of Service Vulnerability
Microsoft Security Update 2026-Sep: Skype for Business and Lync Denial of Service Vulnerability
Affected Products
- Skype for Business Server 2015 CU13
- Skype for Business Server 2019 CU8
- Skype for Business Server Subscription Edition CU1
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66303
- https://nvd.nist.gov/vuln/detail/CVE-2026-66303
This medium severity vulnerability with a CVSS score of 6.5 was published on 2026-09-08 via Microsoft. Affected: Skype for Business Server 2015 CU13, Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1.
vulnfeed aggregates 18513 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.