CVE-2023-35373
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Summary
CVE-2023-35373 is a new vulnerability affecting Mono, an open-source implementation of the Common Language Runtime (CLR) used for cross-platform development. maliciously crafted Authenticode signatures can be used to spoof the validation process, allowing untrusted assemblies to bypass security checks and execute malicious code on vulnerable systems. This issue poses a significant risk to organizations and individuals using Mono-based applications, particularly those that rely on automatic updating or rely on third-party component libraries. Mitigation strategies include updating to the latest version of Mono, implementing strong code signing policies, and carefully scrutinizing any updates or components that are installed.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Microsoft
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions