CVE-2023-21375

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Oct 30, 2023
Updated: Nov 3, 2023
CWE ID 190

Summary

CVE-2023-21375 is a vulnerability affecting Sysproxy, where an integer underflow leads to a possible out-of-bounds write. This issue can result in local privilege escalation without requiring additional execution privileges or user interaction. Despite the name suggesting an input validation error, the root cause is an integer underflow condition within the software. Successful exploitation of this vulnerability can significantly impact system security.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share