CVE-2023-35373

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Jul 11, 2023
Updated: May 29, 2024
CWE ID 347

Summary

CVE-2023-35373 is a new vulnerability affecting Mono, an open-source implementation of the Common Language Runtime (CLR) used for cross-platform development. maliciously crafted Authenticode signatures can be used to spoof the validation process, allowing untrusted assemblies to bypass security checks and execute malicious code on vulnerable systems. This issue poses a significant risk to organizations and individuals using Mono-based applications, particularly those that rely on automatic updating or rely on third-party component libraries. Mitigation strategies include updating to the latest version of Mono, implementing strong code signing policies, and carefully scrutinizing any updates or components that are installed.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share