Lync
Vendor:
First CVE: Jun 12, 2012 · Active for 14 years
43
Total CVEs
More Total CVEs than 97% of tracked products
5.4
Avg CVEs / Year
Higher CVE frequency than 89% of tracked products
7.7
Avg CVSS
Higher Avg CVSS than 61% of tracked products
4.7%
KEV Rate
Higher KEV Rate than 97% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Lync over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jun 12, 2012
14 years ago
Most Recent CVE
Jul 14, 2020
2,201 days ago
CVE Severity & Scoring
Lync43 CVEs
28%
65%
All CVEs352,231 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local14 (32.6%)
Network13 (30.2%)
Unknown16 (37.2%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low24 (55.8%)
High3 (7.0%)
Unknown16 (37.2%)
User Interaction
None6 (14.0%)
Unknown16 (37.2%)
Required21 (48.8%)
Privileges Required
Low3 (7.0%)
High0 (0.0%)
None24 (55.8%)
Unknown16 (37.2%)
Top CVEs
Signals from CVEs in this product scope (43 CVEs).
43 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2013-3906HIGH GDI+ in Microsoft Windows Vista SP2 and Server 2008 SP2; Office 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Lync 2010, 2010 Attendee, 2013, and Bas | Nov 6, 2013 | 7.8 | 97 | YES | YES |
CVE-2015-1671HIGH The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 20 | May 13, 2015 | 7.8 | 85 | YES | NO |
CVE-2016-3304HIGH The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, | Aug 9, 2016 | 7.8 | 65 | NO | YES |
CVE-2016-3303HIGH The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for Business 2016, | Aug 9, 2016 | 7.8 | 65 | NO | YES |
CVE-2016-3301HIGH The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 | Aug 9, 2016 | 7.8 | 62 | NO | YES |
CVE-2015-2455HIGH Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Windows 10, Office | Aug 15, 2015 | 9.3 | 61 | NO | YES |
CVE-2016-3209MEDIUM Graphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows | Oct 14, 2016 | 5.5 | 60 | NO | YES |
CVE-2016-7182CRITICAL The Graphics component in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 G | Oct 14, 2016 | 9.8 | 59 | NO | YES |
CVE-2016-0145HIGH The font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold an | Apr 12, 2016 | 8.8 | 58 | NO | YES |
CVE-2017-0108HIGH The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows | Mar 17, 2017 | 7.8 | 57 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (43 CVEs).
CISA KEV
2 CVEs
4.7% of CVEs· 97th percentile
Metasploit
1 CVE
2.3% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
17 CVEs
39.5% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (43 CVEs).
Media Mentions
Signals from CVEs in this product scope (43 CVEs).
Top CNAs Publishing CVEs For Lync
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2013 | 37 | 7.6 | 28.5% | 2 | 15 |
| 2010 | 33 | 7.5 | 30.1% | 2 | 16 |