CVE-2020-24003
LOW 3.3EPSS 1.2%
Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.
- CVSS v3.1 NVD
- 3.3 LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - CVSS v2.0 NVD
- 2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 1.18% chance of exploitation in the next 30 days, 67th percentile
- Published
- 2021-01-11
- Updated
- 2024-08-04