What’s Vulnerable › Vulnerabilities
CVE-2020-24003
- Severity: low (CVSS 3.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.2% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2021-01-11 · updated 2026-06-17
Description
Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.
Affected products
- Microsoft Skype: through 8.59.0.77
References
Get alerted when CVE-2020-24003 or the next vulnerability affects your stack