CVE-2023-49313

Katalog CVE

CVSS 9.8 · Critical EPSS 1,3%

Kerentanan Improper Control of Generation of Code ('Code Injection') pada horsicq xmachoviewer. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data.

Rincian

Terbit di NVD

28 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-94: Improper Control of Generation of Code ('Code Injection')

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/louiselalanne/CVE-2023-49313 exploit · advisory pihak ketiga
• https://github.com/horsicq/XMachOViewer product