VDB

CVE-2026-85873

CVE-2026-85873 PUBLISHED CVSS 6.5 MEDIUM

Reported by microsoft · Published October 13, 2026

Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

Risk Scores

CVSS 3.1
6.5
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftSkype for Business Server 2015 CU139319.0
MicrosoftSkype for Business Server 2019 CU82046.0
MicrosoftSkype for Business Server Subscription Edition CU12046.0
MicrosoftSkype for Business Server Subscription Edition RTM1.0.0
MicrosoftSkype for Business Server Subscription Edition CU12046.0
MicrosoftSkype for Business Server 2019 CU82046.0
MicrosoftSkype for Business Server 2015 CU139319.0
MicrosoftSkype for Business Server Subscription Edition RTM1.0.0
microsoftskype_for_business_server_subscription_edition_rtm1.0.0
microsoftskype_for_business_server_20192046.0
microsoftskype_for_business_server_20159319.0
microsoftskype_for_business_server_subscription_edition2046.0

Timeline

  • Oct 13, 2026 CVE Published
  • Oct 14, 2026 EPSS Score
  • Oct 14, 2026 Coalition ESS Score
  • Oct 15, 2026 CVE Updated
  • Oct 16, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›