Vulnerability record · CVE-2020-24003 · published 11 January 2021

CVE-2020-24003: Microsoft skype vulnerability

Microsoft · Skype

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.

3.3 CVSS 3.1 Low EPSS 1.2% · top 34.0%

3.3CVSS 3.1 base score, v2 2.1

1.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

2References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Skype Microsoft

References

Link	Tags
https://www.hdwsec.fr/blog/20200608-skype/	ExploitThird Party Advisory
https://www.hdwsec.fr/blog/20200608-skype/	ExploitThird Party Advisory

Track CVE-2020-24003 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2017-6517Microsoft Skype DLL search path hijacking allows remote code executionMicrosoft Skype 7.16.0.102 loads the DLL api-ms-win-core-winrt-string-l1-1-0.dll in an uncontrolled manner, allowing an attacker to place a malicious…EPSS 46%analysed23 Mar 2017 8.8CVE-2017-9948Microsoft skype memory buffer overflow vulnerabilityA stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of r…EPSS 6.4%26 Jun 2017 7.8CVE-2018-0594Microsoft skype untrusted search path vulnerabilityUntrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.EPSS 5.5%26 Jun 2018 7.8CVE-2018-0595Microsoft skype untrusted search path vulnerabilityUntrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecif…EPSS 5.5%26 Jun 2018 7.8CVE-2016-5720Microsoft skype permissions and access controls vulnerabilityMultiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a…EPSS 1.9%23 Jan 2017 5.9CVE-2019-0932Microsoft skype vulnerabilityAn information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'.EPSS 4.9%16 May 2019 4.6CVE-2019-0622Microsoft skype improper authentication vulnerabilityAn elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Andro…EPSS 2.0%8 Jan 2019

Source: NIST National Vulnerability Database (record CVE-2020-24003), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.