Microsoft Lync Basic vulnerabilities

9 CVEs affecting Microsoft Lync Basic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1084, published 2019-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-2455, published 2015-08-15. High severity, CVSS 9.3. EPSS: 37.4% chance of exploitation in the next 30 days. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010…
CVE-2015-2464, published 2015-08-15. High severity, CVSS 9.3. EPSS: 35.6% chance of exploitation in the next 30 days. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live…
CVE-2015-2456, published 2015-08-15. High severity, CVSS 9.3. EPSS: 35.6% chance of exploitation in the next 30 days. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010…
CVE-2015-2463, published 2015-08-15. High severity, CVSS 9.3. EPSS: 34.5% chance of exploitation in the next 30 days. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live…
CVE-2013-3129, published 2013-07-10. High severity, CVSS 7.8. EPSS: 32.4% chance of exploitation in the next 30 days. Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, and 4.5; Silverlight 5 before 5.1.20513.0; win32k.sys in the kernel-mode drivers, and GDI+, DirectWrite, and Journal, in Windows XP SP2 and SP3,…
CVE-2015-2431, published 2015-08-15. High severity, CVSS 9.3. EPSS: 29.8% chance of exploitation in the next 30 days. Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted…
CVE-2015-2435, published 2015-08-15. High severity, CVSS 9.3. EPSS: 21.9% chance of exploitation in the next 30 days. Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office 2007 SP3 and 2010…
CVE-2018-8546, published 2018-11-14. Medium severity, CVSS 5.9. EPSS: 5.5% chance of exploitation in the next 30 days. A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync,…
CVE-2019-1084, published 2019-07-15. Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days. An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability…