CVE-2023-41763
Skype for Business Elevation of Privilege Vulnerability
Skype for Business Elevation of Privilege Vulnerability
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Skype for Business Elevation of Privilege Vulnerability
Skype for Business Elevation of Privilege Vulnerability
- Record
CVE-2023-41763- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C - Weakness
- CWE-918
- Updated
- 2026-11-02
EUVDEUVD-2023-46255
Skype for Business Elevation of Privilege Vulnerability
- Record
EUVD-2023-46255- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-7997-4r78-h34m
Skype for Business Elevation of Privilege Vulnerability
Skype for Business Elevation of Privilege Vulnerability
- Record
GHSA-7997-4r78-h34m- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
CISA KEV No score
Microsoft Skype for Business Privilege Escalation Vulnerability
Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation.
- Record
CVE-2023-41763- Weakness
- CWE-918
- Updated
- 2026-11-02
NVD
Skype for Business Elevation of Privilege Vulnerability
- Record
CVE-2023-41763- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-918
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Nuclei | Skype for Business 2019 (SfB) - Blind Server-side Request Forgery |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Nuclei, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-41763 is a medium vulnerability (CVSS 5.3) in Microsoft Skype For Business, published October 10, 2023. CISA lists it as known to be exploited, since October 10, 2023. EUVD reports exploitation since October 10, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 90.3%, the 99th percentile. No source names a fixed version.