Skype 脆弱性

タイムライン

去年

バージョン

5.3.x	7
2019 CU7	5
2016	5
1.4.0.83	5
2015 CU13	4

修復

Official Fix	61
Temporary Fix	0
Workaround	2
Unavailable	1
Not Defined	15

悪用可能性

High	1
Functional	0
Proof-of-Concept	24
Unproven	13
Not Defined	41

アクセスベクター

Not Defined	0
Physical	1
Local	11
Adjacent	4
Network	63

認証

Not Defined	0
High	5
Low	23
None	51

ユーザー操作

Not Defined	0
Required	24
None	55

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	6
≤5	9
≤6	22
≤7	11
≤8	21
≤9	5
≤10	5

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	6
≤5	16
≤6	19
≤7	21
≤8	8
≤9	5
≤10	3

VulDB

≤1	0
≤2	0
≤3	0
≤4	10
≤5	12
≤6	17
≤7	13
≤8	19
≤9	3
≤10	5

NVD

≤1	0
≤2	0
≤3	0
≤4	1
≤5	3
≤6	6
≤7	3
≤8	6
≤9	3
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	2
≤8	6
≤9	1
≤10	0

ベンダー

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	3
≤7	4
≤8	7
≤9	1
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

0dayエクスプロイト

<1k	0
<2k	3
<5k	3
<10k	14
<25k	32
<50k	26
<100k	1
≥100k	0

本日のエクスプロイト

<1k	52
<2k	8
<5k	13
<10k	5
<25k	1
<50k	0
<100k	0
≥100k	0

Affected Versions (287): 0.92.0.12, 0.93.0.3, 0.98.0.04, 0.98.0.27, 1.0, 1.0.0.1, 1.0.0.7, 1.0.0.9, 1.0.0.18, 1.0.0.29, 1.0.0.94, 1.0.0.97, 1.03, 1.1, 1.1.0.1, 1.1.0.2, 1.1.0.3, 1.1.0.4, 1.1.0.5, 1.1.0.6, 1.1.0.7, 1.1.0.8, 1.1.0.9, 1.1.0.11, 1.1.0.12, 1.1.0.13, 1.1.0.14, 1.1.0.15, 1.1.0.16, 1.1.0.17, 1.1.0.18, 1.1.0.19, 1.1.0.61, 1.1.0.73, 1.1.0.79, 1.1.06, 1.2, 1.2.0.17, 1.2.0.37, 1.2.0.41, 1.2.0.46, 1.3.0.6, 1.3.0.16, 1.3.0.45, 1.3.0.48, 1.3.0.51, 1.3.0.54, 1.3.0.55, 1.3.0.57, 1.3.0.66, 1.4.0.71, 1.4.0.78, 1.4.0.83, 1.5.0.79, 1.5.8, 2.0, 2.0.104, 2.0.105, 2.2, 2.5, 2.5.78, 2.5.79, 2.8, 3.0, 3.1, 3.2, 3.2.0.6673, 3.5, 3.5.0.201, 3.5.0.202, 3.6, 3.6.0.244, 3.6.216, 3.6.244, 3.8, 3.8.0.1, 3.8.0.2, 3.8.0.3, 3.8.0.4, 3.8.0.5, 3.8.0.6, 3.8.0.7, 3.8.0.8, 3.8.0.9, 3.8.0.11, 3.8.0.12, 3.8.0.13, 3.8.0.14, 3.8.0.15, 3.8.0.16, 3.8.0.17, 3.8.0.18, 3.8.0.19, 3.8.0.21, 3.8.0.22, 3.8.0.23, 3.8.0.24, 3.8.0.25, 3.8.0.26, 3.8.0.27, 3.8.0.28, 3.8.0.29, 3.8.0.31, 3.8.0.32, 3.8.0.33, 3.8.0.34, 3.8.0.35, 3.8.0.36, 3.8.0.37, 3.8.0.38, 3.8.0.39, 3.8.0.41, 3.8.0.42, 3.8.0.43, 3.8.0.44, 3.8.0.45, 3.8.0.46, 3.8.0.47, 3.8.0.48, 3.8.0.49, 3.8.0.51, 3.8.0.52, 3.8.0.53, 3.8.0.54, 3.8.0.55, 3.8.0.56, 3.8.0.57, 3.8.0.58, 3.8.0.59, 3.8.0.61, 3.8.0.62, 3.8.0.63, 3.8.0.64, 3.8.0.65, 3.8.0.66, 3.8.0.67, 3.8.0.68, 3.8.0.69, 3.8.0.71, 3.8.0.72, 3.8.0.73, 3.8.0.74, 3.8.0.75, 3.8.0.76, 3.8.0.77, 3.8.0.78, 3.8.0.79, 3.8.0.81, 3.8.0.82, 3.8.0.83, 3.8.0.84, 3.8.0.85, 3.8.0.86, 3.8.0.87, 3.8.0.88, 3.8.0.89, 3.8.0.91, 3.8.0.92, 3.8.0.93, 3.8.0.94, 3.8.0.95, 5.1, 5.2, 5.3, 6.2.0.106, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9, 7.10, 7.11, 7.12, 7.13, 7.14, 7.15, 7.16, 7.16.0.102, 7.17, 7.18, 7.19, 7.20, 7.21, 7.22, 7.23, 7.24, 7.25, 7.26, 7.27, 7.28, 7.29, 7.30, 7.31, 7.32, 7.33, 7.34, 7.35, 7.36, 8.35, 8.59, 8.59.0.1, 8.59.0.2, 8.59.0.3, 8.59.0.4, 8.59.0.5, 8.59.0.6, 8.59.0.7, 8.59.0.8, 8.59.0.9, 8.59.0.11, 8.59.0.12, 8.59.0.13, 8.59.0.14, 8.59.0.15, 8.59.0.16, 8.59.0.17, 8.59.0.18, 8.59.0.19, 8.59.0.21, 8.59.0.22, 8.59.0.23, 8.59.0.24, 8.59.0.25, 8.59.0.26, 8.59.0.27, 8.59.0.28, 8.59.0.29, 8.59.0.31, 8.59.0.32, 8.59.0.33, 8.59.0.34, 8.59.0.35, 8.59.0.36, 8.59.0.37, 8.59.0.38, 8.59.0.39, 8.59.0.41, 8.59.0.42, 8.59.0.43, 8.59.0.44, 8.59.0.45, 8.59.0.46, 8.59.0.47, 8.59.0.48, 8.59.0.49, 8.59.0.51, 8.59.0.52, 8.59.0.53, 8.59.0.54, 8.59.0.55, 8.59.0.56, 8.59.0.57, 8.59.0.58, 8.59.0.59, 8.59.0.61, 8.59.0.62, 8.59.0.63, 8.59.0.64, 8.59.0.65, 8.59.0.66, 8.59.0.67, 8.59.0.68, 8.59.0.69, 8.59.0.71, 8.59.0.72, 8.59.0.73, 8.59.0.74, 8.59.0.75, 8.59.0.76, 8.59.0.77, 2007-02-01, 2010, 2013, 2013 CU10, 2013 SP1, 2015 CU 8, 2015 CU11, 2015 CU13, 2016, 2019 CU2, 2019 CU5, 2019 CU7

Link to Product Website: https://www.microsoft.com/

ソフトウェアタイプ: Unified Communication Software

公開済み	Base	Temp	脆弱性	0day	本日	悪	修復	CTI	CVE
2024年03月12日	8.8	8.1	Microsoft Skype for Consumer Remote Code Execution	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2024-21411
2024年02月13日	5.2	4.8	Microsoft Skype for Business Server 情報の漏洩	$5k-$25k	$0-$5k	Unproven	Official Fix	0.04	CVE-2024-20695
2024年02月13日	7.3	6.7	Microsoft Excel/Office/PowerPoint/Publisher/Visio/Word/Skype Remote Code Execution	$5k-$25k	$0-$5k	Unproven	Official Fix	0.05	CVE-2024-20673
2023年10月17日	5.1	5.1	Skype Legacy Buttons Plugin Shortcode クロスサイトスクリプティング	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-5615
2023年10月10日	5.3	4.8	Microsoft Skype for Business Server 情報の漏洩	$5k-$25k	$0-$5k	Proof-of-Concept	Official Fix	0.03	CVE-2023-41763
2023年10月10日	7.2	6.6	Microsoft Skype for Business Server Privilege Escalation	$5k-$25k	$5k-$25k	Unproven	Official Fix	0.06	CVE-2023-36789
2023年10月10日	7.2	6.6	Microsoft Skype for Business Server Privilege Escalation	$5k-$25k	$5k-$25k	Unproven	Official Fix	0.00	CVE-2023-36786
2023年10月10日	7.2	6.6	Microsoft Skype for Business Server Privilege Escalation	$5k-$25k	$5k-$25k	Unproven	Official Fix	0.00	CVE-2023-36780
2022年07月12日	7.2	6.6	Microsoft Lync Server/Skype for Business Server Privilege Escalation	$5k-$25k	$0-$5k	Unproven	Official Fix	0.00	CVE-2022-33633
2022年07月01日	5.0	5.0	Skype Notifier Plugin Configuration File 特権昇格	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-34805