skype records

8 published records for vendor skype.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2009-4741No exploit	Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors.skype · skype Pre-auth	Critical10.0	—	2.0%	Mar 26, 2010
39Monitor	CVE-2010-3136Proof of concept	Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary cskype · skype pre-auth RCE	Critical9.3	—	6.9%	Aug 26, 2010
36Monitor	CVE-2024-21411No exploit	Skype for Consumer Remote Code Execution Vulnerabilityskype · skype · CWE-453 pre-auth RCE	High8.8	—	2.6%	Mar 12, 2024
35Monitor	CVE-2011-2074No exploit	Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary codskype · skype RCE	High8.5	—	2.8%	May 10, 2011
18Monitor	CVE-2008-5697Proof of concept	The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipbskype · skype extension for firefox Pre-auth	Medium4.3	—	2.1%	Dec 22, 2008
18Monitor	CVE-2004-1778No exploit	Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissiskype · skype · CWE-276	Medium4.6	—	0.3%	Dec 22, 2004
11Monitor	CVE-2006-2312No exploit	Argument injection vulnerability in the URI handler in Skype 2.0..104 and 2.5..0 through 2.5.*.78 for Windows allows remote authorized attskype · skype · CWE-88 Pre-auth	Low2.6	—	4.1%	May 19, 2006
8Monitor	CVE-2011-1717No exploit	Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applicatskype · skype for android · CWE-264	Low2.1	—	0.2%	Apr 18, 2011

CVE-2009-4741
41Plan
Unspecified vulnerability in the Extras Manager before 2.0.0.67 in Skype before 4.1.0.179 on Windows has unknown impact and attack vectors.
CriticalCVSS 10.0No exploitEPSS 2%
- Pre-auth
skype · skypeMar 26, 2010
CVE-2010-3136
39Monitor
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary c
CriticalCVSS 9.3Proof of conceptEPSS 6%
- pre-auth RCE
skype · skypeAug 26, 2010
CVE-2024-21411
36Monitor
Skype for Consumer Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- pre-auth RCE
skype · skypeMar 12, 2024
CVE-2011-2074
35Monitor
Unspecified vulnerability in the client in Skype 5.x before 5.1.0.922 on Mac OS X allows remote authenticated users to execute arbitrary cod
HighCVSS 8.5No exploitEPSS 2%
- RCE
skype · skypeMay 10, 2011
CVE-2008-5697
18Monitor
The skype_tool.copy_num method in the Skype extension BETA 2.2.0.95 for Firefox allows remote attackers to write arbitrary data to the clipb
MediumCVSS 4.3Proof of conceptEPSS 2%
- Pre-auth
skype · skype extension for firefoxDec 22, 2008
CVE-2004-1778
18Monitor
Skype 0.92.0.12 and 1.0.0.1 for Linux, and possibly other versions, creates the /usr/share/skype/lang directory with world-writable permissi
MediumCVSS 4.6No exploitEPSS 0%
skype · skypeDec 22, 2004
CVE-2006-2312
11Monitor
Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized att
LowCVSS 2.6No exploitEPSS 4%
- Pre-auth
skype · skypeMay 19, 2006
CVE-2011-1717
8Monitor
Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applicat
LowCVSS 2.1No exploitEPSS 0%
skype · skype for androidApr 18, 2011