HIGH 7.5 Microsoft
CVE-2026-66307
Skype for Business and Lync Denial of Service Vulnerability
Microsoft Security Update 2026-Sep: Skype for Business and Lync Denial of Service Vulnerability
Affected Products
- Skype for Business Server 2015 CU13
- Skype for Business Server Subscription Edition CU1
- Skype for Business Server 2019 CU8
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66307
- https://nvd.nist.gov/vuln/detail/CVE-2026-66307
This high severity vulnerability with a CVSS score of 7.5 was published on 2026-09-08 via Microsoft. Affected: Skype for Business Server 2015 CU13, Skype for Business Server Subscription Edition CU1, Skype for Business Server 2019 CU8.
vulnfeed aggregates 18513 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.