CVE-2023-21303

Summary

CVE-2023-21303 is a newly disclosed vulnerability that allows an attacker to determine if a specific app is installed on a system through side channel information disclosure, without requiring query permissions. This vulnerability could potentially lead to local information disclosure, and it does not necessitate any additional execution privileges or user interaction for exploitation. This side channel vulnerability poses a risk to the confidentiality of information on affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.