Skype Technologies maintains a focused portfolio centered on the Skype communications platform, which has a prominent installed base across consumer and enterprise deployments. The vulnerability exposure clusters around input-handling and code-execution weakness classes—including improper input validation, buffer-boundary violations, and code-injection flaws—that reflect the parsing and scripting demands of a real-time messaging and video application. Defenders tracking this vendor should monitor Skype releases and client deployments for patching cycles; live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Skype Technologies over time
Signals from CVEs in this vendor scope (14 CVEs).
14 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2008-0454HIGH Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers t | Jan 25, 2008 | 9.3 | 35 | NO | NO |
CVE-2006-5084HIGH Format string vulnerability in the NSRunAlertPanel function in eBay Skype for Mac 1.5.*.79 and earlier allows remote attackers to cause a denial of service (application crash) and | Sep 29, 2006 | 7.5 | 35 | NO | YES |
CVE-2005-3267HIGH Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial | Oct 27, 2005 | 10.0 | 27 | NO | NO |
CVE-2005-3265HIGH Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCAR | Oct 27, 2005 | 9.3 | 25 | NO | NO |
CVE-2004-1114HIGH Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-e | Jan 10, 2005 | 9.3 | 25 | NO | NO |
CVE-2008-1805HIGH Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arb | Jun 6, 2008 | 9.3 | 24 | NO | NO |
CVE-2008-2545HIGH Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass | Jun 6, 2008 | 9.3 | 24 | NO | NO |
CVE-2007-5989MEDIUM Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corr | Dec 13, 2007 | 6.8 | 19 | NO | NO |
CVE-2008-0582MEDIUM Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to inject arbitrary web script or HTML in | Feb 5, 2008 | 4.3 | 16 | NO | NO |
CVE-2008-0583MEDIUM Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows allows user-assisted remote attackers t | Feb 5, 2008 | 4.3 | 16 | NO | NO |
Signals from CVEs in this vendor scope (14 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Skype Technologies.
Media articles that mention a CVE ID that affects a product developed by Skype Technologies — matched by CVE ID, not by vendor name.