CVE-2026-83746

HighCVSS 8.1

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.01%

62th percentile - higher than 62% of all known CVEs

Summary

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. The flaw enables bypassing path restrictions and gaining higher privileges remotely.

Risk Assessment

An attacker with valid credentials can remotely elevate privileges, potentially leading to system compromise over the network. Environments using Skype for Business or Microsoft Lync are at risk.

Recommendation

Immediately install Microsoft security updates for Skype for Business and Microsoft Lync. It is also recommended to restrict network access to these services to trusted segments.

Other vulnerabilities in Skype for Business and Microsoft Lync

CVE-2026-85873Medium
Improper authorization in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network. The vulnerability enables privilege escalation within the application context.

Original NVD description (English source)

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS