CVE-2024-23746

CVSS 9.8 CRITICALEPSS 1.3%CWE-94

Vexday Risk Score

48Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 9.8EPSS 1.3%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

26 Jan 2024Public PoC

02 Feb 2024Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments (bypass a kTCCServiceSystemPolicyAppBundles requirement via a file copy, an app.app/Contents rename, an asar modification, and a rename back to app.app/Contents).

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

public PoCs found — 1

githubgithub.com/louiselalanne/CVE-2024-23746★ 3

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-injection https://github.com/louiselalanne/CVE-2024-23746 https://miro.com/about/https://www.electronjs.org/blog/statement-run-as-node-cves