CVE-2020-24003: Microsoft Skype

Low severity, CVSS 3.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.

Affected products

• Microsoft Skype: up to and including 8.59.0.77

Published 2021-01-11. Last modified 2026-06-17.