This update is available from the Microsoft Download Center only. See the **Update FAQ** for more information. () (64-bit) īefore installing this update, you must have update 2965218 and security update 3039779 installed. Microsoft Communications Platforms and Software To determine the support life cycle for your software version or edition, see Microsoft Support Lifecycle.
Versions or editions that are not listed are either past their support life cycle or are not affected. The following software versions or editions are affected. For more information about the vulnerability see the Vulnerability Information section.įor more information about this update, see Microsoft Knowledge Base Article 3105872. The security update addresses the vulnerability by correcting how Skype for Business and Microsoft Lync clients sanitize content. For more information, see the Affected Software section. This security update is rated Important for all supported editions of Skype for Business 2016, Microsoft Lync 2013, and Microsoft Lync 2010 it is also rated Important for certain Microsoft Lync Room System components. The vulnerability could allow information disclosure if an attacker invites a target user to an instant message session and then sends that user a message containing specially crafted JavaScript content. This security update resolves a vulnerability in Skype for Business and Microsoft Lync. In this article Security Update for Skype for Business and Microsoft Lync to Address Information Disclosure (3105872)
0 kommentar(er)
