CVE Watch8 sept 2026

CVE-2026-66306

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information o

CVSS

6.5

Medio

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026 · CWE-209

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Generation of error message containing sensitive information in Skype for Business allows an unauthorized attacker to disclose information over a network.

Referencias oficiales

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66306

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-696845.5 MED

—

———Generation of error message containing sensitive information in Windows Error Reporting allows an authorized attacker to disclose information locally.5h CVE-2026-695525.7 MED

—

———Generation of error message containing sensitive information in Windows Print Spooler Components allows an authorized attacker to disclose information over a network.5h CVE-2026-692945.5 MED

—

———Generation of error message containing sensitive information in Microsoft COM for Windows allows an authorized attacker to disclose information locally.5h CVE-2026-688865.5 MED

—

———Use after free in Windows Network Connection Broker allows an authorized attacker to disclose information locally.5h CVE-2026-673836.5 MED

—

———Generation of error message containing sensitive information in SQL Server allows an authorized attacker to disclose information over a network.5h CVE-2026-118736.5 MED

25.0%

——8An Apache-proxied Dogtag CA REST endpoint exposed by IdM (POST /ca/rest/certrequests) returns HTTP 500 with internal Java stack traces for unauthenticated malformed requests. The same unauthenticated error path emits large multi-line stack traces into the CA debug log, creating a log-amplification resource exhaustion vector (disk growth and I/O contention) without requiring authentication.7d