Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Priority LOW 18

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted…

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.01184 Published 2021-01-11 No fix listed
TI-2019-00412 CVE-2019-0622 · GHSA-65j8-j9v8-cm3q

Improper authentication in Microsoft Skype

Priority LOW 25

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.

CVSS 3.0MEDIUM 4.6 Physical No auth No interaction EPSS 0.01968 Published 2019-01-08 No fix listed CWE-287
Priority MEDIUM 42

Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05433 Published 2018-06-26 No fix listed CWE-426
Priority MEDIUM 42

Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.05433 Published 2018-06-26 No fix listed CWE-426
Priority LOW 38

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) msi.dll, (2) dpapi.dll, or (3) cryptui.dll that is lo…

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.01875 Published 2017-01-23 No fix listed CWE-264