MS15-044: Description of the security update for Lync 2013 (Skype for Business): May 12, 2015

Applies to: Microsoft Lync 2013Skype for Business


This security update resolves a vulnerability in Microsoft Lync that could allow information disclosure if a user opens a specially crafted Lync meeting request.

This security update for Microsoft Lync 2013 includes the new Skype for Business client.

  • The download page will still display this update as being for Lync 2013.
  • After you apply this May 12, 2015, security update, Lync 2013 will be upgraded to Skype for Business. Get the general information about the new experience in Skype for Business.
  • You can still use the Lync client user interface after you apply this update for Lync 2013 (Skype for Business). Get the general information about how to switch between the Skype for Business and the Lync client user interfaces for Office 365 users and Lync Server 2013 users.


Microsoft has released security bulletin MS15-044. Learn more about how to obtain the fixes that are included in this security bulletin:
  • For individual, small business, and organizational users: Use the Windows automatic updating feature to install the fixes from Microsoft Update. To do this, see Get security updates automatically on the Microsoft Safety and Security Center website.
  • For IT professionals: See Microsoft Security Bulletin MS15-044 on the Security TechCenter website.

How to get help and support for this security update

Help for installing updates: Protect yourself online

Help for protecting your Windows-based computer from viruses and malware: Microsoft Security

Local support according to your country: International Support

More information about this security update

To enable this Lync 2013 security update, make sure that the following updates are installed:

MSOLYNCHELPLOCOffice 2013 SP1Office 2013 Language Pack SP1

Improvements and fixes

This security update provides improvements that are described in the following article:This security update resolves nonsecurity issues that are described in the following articles:

Restart information

You may have to restart the computer after you install this security update.

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.

Learn about why you may be prompted to restart your computer after you install a security update on a Windows-based computer.

Security update replacement information

This security update replaces security update 2881013.

Removal information

Important We do not recommend that you remove any security update.

To remove this security update, use the Add or Remove Programs item or use the Programs and Features item in Control Panel.

Note When you remove this security update, you may be prompted to insert the disc that contains Microsoft Lync 2013. Additionally, you may not have the option to uninstall this security update from the Add or Remove Programs item or the Programs and Features item in Control Panel. There are several possible causes of this issue.

General information about how to uninstall Office updates.