CVE-2024-20695
MediumCVSS 5.7Exploitation Probability (EPSS)
Low risk44th percentile - higher than 44% of all known CVEs
Summary
A vulnerability in Skype for Business allows information disclosure.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to data transmitted through Skype for Business.
Recommendation
Install security updates provided by Microsoft for Skype for Business.
Other vulnerabilities in Skype for Business
See all- CVE-2026-69646High
Improper verification of cryptographic signature in Skype for Business allows an unauthorized attacker to perform spoofing over an adjacent network.
- CVE-2026-66307High
Integer underflow (wrap or wraparound) in Skype for Business allows an unauthorized attacker to deny service over a network.
- CVE-2026-66305High
Use of client-side authentication in Skype for Business allows an authorized attacker to perform spoofing over a network.
- CVE-2026-66304High
Server-side request forgery (SSRF) in Skype for Business allows an unauthorized attacker to disclose information over a network.
- CVE-2026-66302Critical
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network.
Original NVD description (English source)
Skype for Business Information Disclosure Vulnerability