Patch tracker / Products / Skype for Business Server 2019 CU8

Skype for Business Server 2019 CU8: vulnerabilities and security updates

Every CVE affecting Skype for Business Server 2019 CU8 and the Microsoft update (KB) that fixes it, ranked by real-world risk. Actively exploited (CISA KEV) first, then EPSS exploit probability, on top of CVSS severity.

CVEs
10
Updates (KBs)
3
Actively exploited (KEV)
0
Critical Severity
1

CVEs affecting Skype for Business Server 2019 CU8

CVESeverityCVSSEPSSStatus
CVE-2026-66302Critical9.8--
CVE-2026-69646High8.3--
CVE-2026-66304High7.5--
CVE-2026-66307High7.5--
CVE-2026-66305High7.1--
CVE-2026-63523Medium6.5--
CVE-2026-66303Medium6.5--
CVE-2026-66306Medium6.5--
CVE-2026-66308Medium6.5--
CVE-2026-69642Medium6.5--

Updates (KBs) for Skype for Business Server 2019 CU8

UpdateReleasedSeverityCVSSEPSSCVEsStatus
KB51232872026-09-08Critical9.8-10-
KB51233002026-09-08Critical9.8-10-
KB51233012026-09-08Critical9.8-10-

Ranked across all products on the Microsoft patch tracker and the CVE and vulnerability management reference. Browse every product: product index.

Most searched on Senserva right now

KB5099540: the full CVE list KB5120708: the full CVE list KB5099538 download and what it fixes KB5101650 install notes and severity CVE-2026-53412 exploit status KB5120238: the full CVE list KB5094123: the full CVE list CVE-2026-55040 exploit status KB5099539: patch details KB5120242 install notes and severity
New to a term on this page? CVE, KB, KEV, CVSS, and EPSS are each explained once, on the Senserva security lexicon. Reference: Microsoft CVE and vulnerability management and the Microsoft patching guide.
Provided as is, without warranty; verify against the vendor advisory before acting. Data notice and terms.