CVE-2023-32849

Summary

CVE-2023-32849 is a newly identified vulnerability affecting the cmdq software. This issue involves a potential out-of-bounds write caused by type confusion. The consequence of this vulnerability is a local privilege escalation, which grants System execution privileges to the attacker. Notably, user interaction is not required for exploitation, making it a significant concern for security. To mitigate this risk, organizations are advised to apply the patch with ID ALPS08161758 as soon as possible.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.