Microsoft Office Communicator — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Office Communicator, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2013-1302 — CVSS 9.3 (critical): Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows…
• CVE-2008-3068 — CVSS 7.5 (high): Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation…
• CVE-2008-5180 — CVSS 5.3 (medium): Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service (memory…
• CVE-2008-5181 — CVSS 5.0 (medium): Microsoft Communicator allows remote attackers to cause a denial of service (application or device outage) via instant messages containing…
• CVE-2008-5179 — CVSS 5.0 (medium): Unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger allows remote…
• CVE-2012-2520 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010…
• CVE-2012-1858 — CVSS 4.3 (medium): The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010…