CVE-2024-56955

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Jan 27, 2025
Updated: Jan 28, 2025
CWE ID 601
CWE ID 922

Summary

CVE-2024-56955 is a vulnerability affecting Tencent Technology's QQMail iOS 6.6.4. This issue permits attackers to gain unauthorized access to sensitive user information by crafting and supplying malicious links. Successful exploitation of this vulnerability could result in the exposure of personal data, posing a significant privacy risk to QQMail iOS users. The precise nature of the data that can be accessed and the attack vector involved have not been disclosed, but users are strongly advised to update to the latest software version or apply any available patches to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share