Microsoft Skype For Business Basic vulnerabilities

4 CVEs affecting Microsoft Skype For Business Basic, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-1084, published 2019-07-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-0073, published 2017-03-17. Medium severity, CVSS 4.3. EPSS: 33.4% chance of exploitation in the next 30 days. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10…
CVE-2017-0060, published 2017-03-17. Medium severity, CVSS 5.5. EPSS: 15.9% chance of exploitation in the next 30 days. The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10…
CVE-2018-8546, published 2018-11-14. Medium severity, CVSS 5.9. EPSS: 5.5% chance of exploitation in the next 30 days. A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Lync,…
CVE-2019-1084, published 2019-07-15. Medium severity, CVSS 6.5. EPSS: 5.3% chance of exploitation in the next 30 days. An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability…