CVE-2019-0622

—

CVSS 3.0

4.6 medium

EPSS

2%p79

Published

Jan 8, 2019 (Jan 8, 2019)

Modified

Jun 17, 2026

Description

An elevation of privilege vulnerability exists when Skype for Andriod fails to properly handle specific authentication requests, aka "Skype for Android Elevation of Privilege Vulnerability." This affects Skype 8.35.

Vendors: microsoft
Products: skype
Weakness: CWE-287
Vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (2.0%)

In the news2 stories

Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities

Security AffairsJan 9, 09:19 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0547 CVE-2019-0550 CVE-2019-0551+46 CVEs

Microsoft Patch Tuesday — January 2019 Security Updates Released

The Hacker NewsJan 9, 07:33 UTC · Jan 9, 2019Vulnerability in the wildCVE-2019-0579 CVE-2019-0560 CVE-2019-0622+1 CVEs