Skype for Consumer Remote Code Execution Vulnerability
CVE-2024-21411

8.8HIGH

Key Information:

Vendor
Microsoft
Status
Skype For Consumer
Vendor
CVE Published:
12 March 2024

Badges

👾 Exploit Exists

Summary

A vulnerability in Skype for Consumer allows remote code execution, potentially enabling attackers to gain unauthorized access and control over affected systems. This vulnerability could compromise user data and application functionality, making it essential for users to update to the latest versions and apply necessary security patches to mitigate risks associated with this flaw.

Affected Version(s)

Skype for Consumer Unknown 1.0.0 < 8.113

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre DatabaseMicrosoft Feed0 Proof of Concept(s)
.