Vulnerability
Microsoft Skype for Business Privilege Escalation Vulnerability
Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA description: “Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.”
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NAbove the FIRST 'patch on a priority schedule' threshold.
No VEX statements published for CVE-2023-41763. Vendors publish VEX (Vulnerability Exploitability eXchange) to assert per-product whether a CVE is actually exploitable in their distribution.
Active exploitation with limited impact — coordinate patching