CVE-2020-24003

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain…

published January 11, 2021

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01184 · 67.6th percentile
Published
2021-01-11T15:26Z
EPSS history
Timeline
  • 11 JAN 15:26Z
    Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain…
    cvelistv5