CVE-2023-32546

Summary

CVE-2023-32546 is a code injection vulnerability discovered in Chatwork Desktop Application for Mac versions 2.6.43 and below. This issue allows a non-administrative user to surreptitiously store and access audio and image data within the application, bypassing the user's consent. The exploitation of this vulnerability could lead to significant privacy concerns. The Chatwork team has been notified and is encouraged to release an updated version to mitigate this risk. Users are advised to exercise caution and keep their software up-to-date to protect against potential attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.