M365 Change Tracker

← All changes · security · CVE-2026-66302

CVE-2026-66302CriticalMonitor

Skype for Business Remote Code Execution Vulnerability

Severity Critical  ·  Urgency Monitor

Why it matters: Critical severity (CVSS 9.8)

Remote Code Execution · Critical · CVSS 9.8. Affects: Skype for Business Server, Skype for Business Server Subscription Edition CU1.

CVSS 9.8Security update published 2026-09-08Applies to On-premisesNVD

Affected: Skype for Business Server, Skype for Business Server Subscription Edition CU1

Related changes

Change history

2026-09-08 · First captured by tracker

View at Microsoft →