CVE-2012-1849: Microsoft Lync

High severity, CVSS 9.3. EPSS: 18.4% chance of exploitation in the next 30 days.

Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."

Affected products

• Microsoft Lync: version 2010 only

Published 2012-06-12. Last modified 2026-06-16.