Skip to content
COOEY

EXPOSURES › CVE-2023-41763

CVE-2023-41763

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2023-10-10 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-41763 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

Microsoft Skype for Business privilege escalation vulnerability allows for remote code execution.

Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation, enabling remote code execution. This is a high-severity issue that could lead to significant exposure and compliance risks for DIB organizations. Immediate action is required to mitigate this risk.

Shame score — The vulnerability allows for remote code execution, which is a severe security risk that could lead to significant damage.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized