CVE-2024-46963
CVSS 3.1 Score 8.1 of 10 (high)
Details
Published Nov 11, 2024
Updated: Nov 12, 2024
CWE ID 94
Summary
CVE-2024-46963 is a vulnerability affecting the com.superfast.video.downloader app, also known as Super Unlimited Video Downloader - All in One, for Android. The issue lies within the com.bluesky.browser.ui.BrowserMainActivity component, which allows an attacker to inject and execute arbitrary JavaScript code. This vulnerability poses a significant risk as JavaScript code can be used to steal sensitive data, install malware, or take control of the affected device. Users are urged to update their apps to the latest version to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.