CVE-2023-35665

Summary

CVE-2023-35665 is a vulnerability affecting multiple files where a missing permission check allows for the importing of contacts from other users. This issue grants local escalation of privilege to the attacker, permitting them to elevate their access level without requiring any additional execution privileges. The exploitation of this vulnerability does not necessitate user interaction.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.