CVE-2018-0595

CVE-2018-0595 is an untrusted search path (DLL planting) vulnerability in the Skype for Windows installer. The installer can be hijacked by a Trojan horse DLL placed in the same directory, allowing arbitrary code execution with the privileges of the invoking user. Documents consistently identify ...