CVE-2023-20834

CVSS 3.1 Score 6.4 of 10 (medium)

Details

Published Sep 4, 2023
Updated: Sep 7, 2023
CWE ID 416
CWE ID 362

Summary

CVE-2023-20834 is a newly identified vulnerability affecting the pda software. This issue involves a race condition that leads to a possible use-after-free situation. This vulnerability could be exploited to achieve local privilege escalation, with System execution privileges required. Importantly, user interaction is not needed for an attacker to successfully exploit this vulnerability. The affected software can be patched with Patch ID ALPS07608514.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share