AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-69646

Microsoft Skype for Business: spoofing

Microsoft

CVE-2026-69646 · Published Sep 8, 2026 · updated Sep 16, 2026

High8.3
Fix: upgrade to 6.0.9319.885 or later (3 fixed versions below)
Microsoft advisory

Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.

Affected versions

PackageAffectedFixed in
Skype for Business Server 2015 CU13
Product
>= 9319.0, < 6.0.9319.8856.0.9319.885
Skype for Business Server 2019 CU8
Product
>= 2046.0, < 7.0.2046.5697.0.2046.569
Skype for Business Server Subscription Edition CU1
Product
>= 2046.0, < 7.0.2046.8797.0.2046.879
Details and references
CVSS 3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-347

More Microsoft advisories

All Microsoft
Medium 6.5Sep 8Microsoft Skype for Business: cross-site scriptingCVE-2026-69642fixed in 6.0.9319.885 +2High 7.1Sep 8Microsoft Skype for Business: spoofingCVE-2026-66305fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: information disclosureCVE-2026-66306fixed in 6.0.9319.885 +2High 7.5Sep 8Microsoft Skype for Business: integer overflowCVE-2026-66307fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: out-of-bounds readCVE-2026-66308fixed in 6.0.9319.885 +2Medium 6.5Sep 8Microsoft Skype for Business: cross-site scriptingCVE-2026-63523fixed in 6.0.9319.885 +2