CVE-2020-24003

Name of the Vulnerable Software and Affected Versions: Microsoft Skype versions through 8.59.0.77 on macOS

Description: The issue allows a local process with the user's privileges to obtain unprompted microphone and camera access. This is achieved by loading a crafted library, which enables the process to inherit Skype Client's microphone and camera access due to the disable-library-validation entitlement.

Recommendations: For Microsoft Skype versions through 8.59.0.77 on macOS, consider restricting access to the microphone and camera until a fix is available. As a temporary workaround, review and restrict any library loading capabilities to minimize the risk of exploitation.