Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Skype · all components

Priority MEDIUM 42

Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05433 Published 2018-06-26 No fix listed CWE-426
Priority MEDIUM 42

Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05433 Published 2018-06-26 No fix listed CWE-426
Priority LOW 38

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) msi.dll, (2) dpapi.dll, or (3) cryptui.dll that is lo…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01875 Published 2017-01-23 No fix listed CWE-264
TI-2019-00412 CVE-2019-0622 · GHSA-65j8-j9v8-cm3q

Improper authentication in Microsoft Skype

Priority LOW 25

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.01968 Published 2019-01-08 No fix listed CWE-287
Priority LOW 18

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.01184 Published 2021-01-11 No fix listed
Open these records in search →