CVE-2026-85873
CVE-2026-85873 · Skype for Business Elevation of Privilege Vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.
CVSS 6.5 · Medium · EPSS 0.8%
- Published
- Updated
Affected products and versions
skype for business server 2015 cu13
- Versions
- ≥ 9319.0, < 6.0.9319.886: Affected (custom)
No fix published
skype for business server 2019 cu8
- Versions
- ≥ 2046.0, < 7.0.2046.583: Affected (custom)
No fix published
skype for business server subscription edition cu1
- Versions
- ≥ 2046.0, < 7.0.2046.889: Affected (custom)
No fix published