cve/2020/CVE-2020-24003.md
2024-06-09 00:33:16 +00:00

806 B

CVE-2020-24003

Description

Microsoft Skype through 8.59.0.77 on macOS has the disable-library-validation entitlement, which allows a local process (with the user's privileges) to obtain unprompted microphone and camera access by loading a crafted library and thereby inheriting Skype Client's microphone and camera access.

POC

Reference

Github

No PoCs found on GitHub currently.