Home / Vulnerabilities / CVE-2023-41763
MEDIUM SEVERITY
CVE-2023-41763Microsoft · Skype for Business

Microsoft Skype for Business Privilege Escalation Vulnerability

Technical Severity

CVSS v3.1 Metrics

MEDIUM
5.3 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Exploitation Likelihood

EPSS Prediction

14.38 %
Predictive Probability
Percentile Rank
94.4 th

Documented as more likely to be exploited than 94.4% of known CVEs.

Detection Date

Oct 10, 2023

Remediation Due

Oct 31, 2023

CISA Catalog Active

Threat Analysis

Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.

Remediation Directive

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

External Intelligence

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-41763

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-41763

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2023-41763