There’s a gaping hole in Skype’s update installer which could potentially allow an attacker to gain full control over the host machine, and what’s more, this isn’t something Microsoft can patch against right now, with the software giant having to put off the fix until a future version of the Skype app is rolled out.

The flaw was uncovered by a security researcher, Stefan Kanthak, who found that the Skype update installer can be exploited with a DLL hijacking technique, which fools the app into utilizing malicious code rather than Microsoft’s intended code.