CVE-2020-24003: microsoft skype
Vulnerability summary
CVE-2020-24003 is a low (CVSS 3.3) vulnerability in microsoft skype. EPSS estimates a 1.18% chance of exploitation in the next 30 days, higher than 67.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 11-01-2021PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.18%
Chance of exploitation in the next 30 days
Percentile
67%
Versus all other CVEs
30-day change
+0.02 pp
From 1.16% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (hdwsec.fr)
Maturity: unknown
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Microsoft1 product
- skype≤ 8.59.0.77
1 vendor · 1 product