HIGH 7.5 Microsoft

CVE-2026-66304

Skype for Business Information Disclosure Vulnerability

Microsoft Security Update 2026-Sep: Skype for Business Information Disclosure Vulnerability

Affected Products

Skype for Business Server 2019 CU8
Skype for Business Server Subscription Edition CU1
Skype for Business Server 2015 CU13

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66304
https://nvd.nist.gov/vuln/detail/CVE-2026-66304

Published: 2026-09-08 · Source: Microsoft · Feed updated: 2026-10-27

This high severity vulnerability with a CVSS score of 7.5 was published on 2026-09-08 via Microsoft. Affected: Skype for Business Server 2019 CU8, Skype for Business Server Subscription Edition CU1, Skype for Business Server 2015 CU13.

vulnfeed aggregates 18513 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.