CVE-2023-21300

Summary

CVE-2023-21300 is a vulnerability affecting the PackageManager component of certain software. This issue allows an attacker to infer whether an app is installed on a system without proper query permissions. The disclosure of this information could result in local information disclosure, posing a potential security risk. Notably, no additional execution privileges or user interaction are required for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.