CVE-2023-36786

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Skype for Business Remote Code Execution Vulnerability

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-36

Affected software

VendorProductVersions
MicrosoftSkype for Business Server 2015 CU13>= 9319.0, < 6.0.9319.869
MicrosoftSkype for Business Server 2019 CU7>= 2046.0, < 7.0.246.530

References

Timeline

Published
Oct 10, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-367878.8Microsoft Edge (Chromium-based) Elevation of Privilege VulnerabilityCVE-2023-367887.8.NET Framework Remote Code Execution VulnerabilityCVE-2023-367897.2Skype for Business Remote Code Execution VulnerabilityCVE-2023-36799.8A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as critical. Affected by this issue is CVE-2023-367907.8Windows RDP Encoder Mirror Driver Elevation of Privilege VulnerabilityCVE-2023-367927.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-367937.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-367947.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-367967.8Visual Studio Remote Code Execution VulnerabilityCVE-2023-367996.5.NET Core and Visual Studio Denial of Service VulnerabilityCVE-2023-36809.8A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part CVE-2023-368005.4Dynamics Finance and Operations Cross-site Scripting Vulnerability
CVE-2023-36786: High severity, CVSS 7.2 | Vulnix