CVE-2024-23746

CRITICO 9.8CVE-2024-23746 · Published 02/02/2024 · updated 17/06/2026

In breve

CVE-2024-23746 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda miro (miro).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
miro miro	`= 0.8.18`	No fix yet

Description

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments (bypass a kTCCServiceSystemPolicyAppBundles requirement via a file copy, an app.app/Contents rename, an asar modification, and a rename back to app.app/Contents).

References

book.hacktricks.xyz/macos-hardening/macos-security-and-privilege-escalation/macos-proces-abuse/macos-electron-applications-injection · Exploit
louiselalanne/CVE-2024-23746 · Exploit
miro.com/about · Product
electronjs.org/blog/statement-run-as-node-cves

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free