CVE-2017-9948: A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.3...

Security readout for executives and security teams

This CVE describes a memory-safety flaw in older Microsoft Skype desktop versions. A crafted remote RDP clipboard interaction could cause Skype's message box handling to overflow a stack buffer. The bundle does not provide CVSS, confirmed impact, or Microsoft advisory details, so urgency depends on whether these obsolete Skype builds remain in use. Exposure is most likely in environments still running legacy Skype 7.x desktop clients, especially 7.2, 7.35, or 7.36. Modern Skype installations or environments without those versions are not shown as affected by the supplied evidence. Prioritize as legacy software cleanup unless affected Skype 7.x clients are still present. If found on user workstations or remote-access hosts, remediate promptly because buffer overflows can create unpredictable security and stability risk. Mitigation focus: Identify and remove Skype 7.2, 7.35, and 7.36 installations.; Upgrade legacy Skype clients beyond the affected range or to supported Microsoft versions.; Check Microsoft or vendor guidance for authoritative remediation details..

Prepared

Jun 13, 2026, 04:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.