microsoft lync

Name: microsoft lync
Brand: microsoft

productUS

cpe:2.3:a:microsoft:lync:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical28high12medium1low

updated 2026-10-27

vulnerabilities (43)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2013-3906US	high7.8OT critical	84.9% (100th)	KEV	no fix	2013-11-06	2 versions
CVE-2015-1671US	high9.3OT critical	48.8% (99th)	KEV	no fix	2015-05-13	2 versions
CVE-2016-3209US	medium5.5	53.7% (99th)	Exploit	no fix	2016-10-14	2 versions
CVE-2016-3304US	high7.8	50.5% (99th)	Exploit	no fix	2016-08-09	2 versions
CVE-2016-3303US	high7.8	50.5% (99th)	Exploit	no fix	2016-08-09	2 versions
CVE-2017-0108US	high7.8	50.5% (99th)	Exploit	no fix	2017-03-17	2 versions
CVE-2016-3301US	high7.8	44.5% (99th)	Exploit	no fix	2016-08-09	2 versions
CVE-2016-0145US	high8.8	40.8% (99th)	Exploit	no fix	2016-04-12	2 versions
CVE-2017-0283US	high8.8	39.0% (99th)	Exploit	no fix	2017-06-15	= 2013
CVE-2015-2455US	high9.3	37.4% (99th)	Exploit	no fix	2015-08-15	2 versions
CVE-2015-2510US	high9.3	35.6% (98th)	Exploit	no fix	2015-09-09	2 versions
CVE-2015-2464US	high9.3	35.6% (98th)	Exploit	no fix	2015-08-15	2 versions
CVE-2015-2456US	high9.3	35.6% (98th)	Exploit	no fix	2015-08-15	2 versions
CVE-2015-2463US	high9.3	34.5% (98th)	Exploit	no fix	2015-08-15	2 versions
CVE-2016-7182US	critical9.8	30.3% (98th)	Exploit	no fix	2016-10-14	2 versions
CVE-2015-2431US	high9.3	29.8% (98th)	Exploit	no fix	2015-08-15	= 2010
CVE-2012-1858US	medium4.3	22.0% (98th)	Exploit	no fix	2012-06-12	= 2010
CVE-2017-0060US	medium5.5	15.9% (97th)	Exploit	no fix	2017-03-17	2 versions
CVE-2012-2520US	medium4.3	34.3% (98th)	—	no fix	2012-10-09	= 2010
CVE-2017-0073US	medium4.3	33.4% (98th)	—	no fix	2017-03-17	2 versions
CVE-2013-3129US	high9.3	32.4% (98th)	—	no fix	2013-07-10	2 versions
CVE-2016-3263US	medium5.5	32.0% (98th)	—	no fix	2016-10-14	2 versions
CVE-2016-3262US	medium5.5	32.0% (98th)	—	no fix	2016-10-14	2 versions
CVE-2015-6108US	high9.3	26.0% (98th)	—	no fix	2015-12-09	2 versions
CVE-2016-3396US	high7.8	24.4% (98th)	—	no fix	2016-10-14	2 versions
CVE-2013-1302US	high9.3	21.9% (98th)	—	no fix	2013-05-15	= 2010
CVE-2015-2435US	high9.3	21.9% (98th)	—	no fix	2015-08-15	2 versions
CVE-2017-8527US	high8.8	19.0% (97th)	—	no fix	2017-06-15	= 2013
CVE-2012-1849US	high9.3	18.4% (97th)	—	no fix	2012-06-12	= 2010
CVE-2015-6107US	high9.3	18.2% (97th)	—	no fix	2015-12-09	2 versions
CVE-2015-6106US	high9.3	17.3% (97th)	—	no fix	2015-12-09	2 versions
CVE-2018-8311US	high8.8	16.9% (97th)	—	no fix	2018-07-11	—
CVE-2015-2503US	high9.3	16.5% (97th)	—	no fix	2015-11-11	= 2013
CVE-2017-8696US	high7.5	14.3% (97th)	—	no fix	2017-09-13	2 versions
CVE-2017-8676US	low3.3	14.0% (97th)	—	no fix	2017-09-13	2 versions
CVE-2015-6061US	medium4.3	12.8% (96th)	—	no fix	2015-11-11	2 versions
CVE-2017-8695US	medium5.3	9.64% (95th)	—	no fix	2017-09-13	2 versions
CVE-2017-11786US	high8.8OT elevated	9.39% (95th)	—	no fix	2017-10-13	= 2013
CVE-2019-1209US	medium6.5	6.20% (93rd)	—	no fix	2019-09-11	= 2013
CVE-2018-8238US	high7.8	5.99% (93rd)	—	no fix	2018-07-11	= 2013
CVE-2020-1025US	critical9.8	5.85% (93rd)	—	no fix	2020-07-14	= 2013
CVE-2018-8546US	medium5.9	5.46% (93rd)	—	no fix	2018-11-14	= 2013
CVE-2019-1084US	medium6.5	5.33% (93rd)	—	no fix	2019-07-15	= 2013

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation13 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer10 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor10 CVEs
CWE-264CWE-2644 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-19CWE-191 CVEs
CWE-294Authentication Bypass by Capture-replay1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE43 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan