Vulnerability · NVD

CVE-2019-0622

MEDIUM 4.6 Vendor bulletin scale — NVD CVSS pending Published on 2019-01-08

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.

Attack vector : Physical No privileges required No user interaction

Show raw CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS 1.97% above median percentile 78.5%

Tracked apps referencing this CVE

For each app: the affected range, the fixing version, and where the tracked app stands today.

Raider Android com.skype.raider

Affected — Fixed in — Latest tracked — undetermined

Vulnerable CPE configurations (1)

Vendor	Product	Platform	Versions	CPE 2.3 URI
microsoft	skype Android	Android	—	cpe:2.3:a:microsoft:skype:8.35:::::android::

View on NVD ↗ Advisory · portal.msrc.microsoft.com