CVE-2024-21411

FAQ

How could an attacker exploit this vulnerability?

An attacker could exploit the vulnerability by sending the user a malicious link or a malicious image via Instant Message and then convincing the user to click the link or image.

How do I get the update?

1. Click the Download link.
2. Under Skype for Desktop select the Get Skype for Windows 10 & 11 arrow to display download options.
3. Select from the following to download the version you need for your Desktop.

• Get Skype for Windows
• Get Skype for Mac
• Get Skype for Linux SNAP

To verify that you have the latest version of Skype installed, Select Settings > Help & Feedback.

For more information on how to update Skype, see Updating to the latest version of Skype.

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), integrity (I:H), and availability (A:H). What does that mean for this vulnerability?

An attacker who successfully exploited this vulnerability could gain high privileges, which include read, write, and delete functionality.