Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-44098 State: PUBLISHED Published: 2023-11-08T09:02:05.173Z Last Updated: 2024-09-04T18:59:04.570Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Vulnerability of missing encryption in the card management module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-44099 State: PUBLISHED Published: 2023-12-06T08:35:43.088Z Last Updated: 2024-08-02T19:59:50.656Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-754 Description: Vulnerability of data verification errors in the kernel module. Successful exploitation of this vulnerability may cause WLAN interruption. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2023/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202312-0000001758430245
CVE ID: CVE-2023-44100 State: PUBLISHED Published: 2023-10-11T11:47:55.811Z Last Updated: 2024-09-18T15:27:58.378Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission Issues Description: Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44101 State: PUBLISHED Published: 2023-10-11T11:48:56.203Z Last Updated: 2024-09-18T15:26:27.153Z Vendors: Huawei Products: HarmonyOS Problem Types: Permission Issues Description: The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44102 State: PUBLISHED Published: 2023-10-11T11:50:20.615Z Last Updated: 2024-09-18T15:24:20.522Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44103 State: PUBLISHED Published: 2023-10-11T11:51:36.547Z Last Updated: 2024-09-18T15:19:26.094Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Out-of-bounds read vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44104 State: PUBLISHED Published: 2023-10-11T11:52:52.971Z Last Updated: 2024-09-18T15:17:04.450Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permission Issues Description: Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44105 State: PUBLISHED Published: 2023-10-11T12:06:03.840Z Last Updated: 2024-09-19T13:11:26.607Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-269 Description: Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44106 State: PUBLISHED Published: 2023-10-11T11:55:10.352Z Last Updated: 2024-09-18T15:15:30.442Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44107 State: PUBLISHED Published: 2023-10-11T12:06:58.651Z Last Updated: 2024-09-18T16:04:23.443Z Vendors: Huawei Products: HarmonyOS Problem Types: Weaknesses Introduced During Design Description: Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may affect service availability and integrity. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44108 State: PUBLISHED Published: 2023-10-11T12:08:10.395Z Last Updated: 2024-09-18T17:58:04.587Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-843 Description: Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44109 State: PUBLISHED Published: 2023-10-11T10:41:47.947Z Last Updated: 2024-08-02T19:59:50.707Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-74 Description: Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44110 State: PUBLISHED Published: 2023-10-11T11:57:43.178Z Last Updated: 2024-09-18T15:08:57.208Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-20 Description: Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44111 State: PUBLISHED Published: 2023-10-11T11:59:01.687Z Last Updated: 2024-09-18T15:06:27.540Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44112 State: PUBLISHED Published: 2024-01-16T08:00:06.992Z Last Updated: 2024-09-03T19:46:01.244Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-44113 State: PUBLISHED Published: 2023-12-06T08:42:11.010Z Last Updated: 2024-10-10T18:32:25.502Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/12/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202312-0000001758430245
CVE ID: CVE-2023-44114 State: PUBLISHED Published: 2023-10-11T12:00:14.247Z Last Updated: 2024-09-18T15:05:06.617Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-125 Description: Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44115 State: PUBLISHED Published: 2023-11-08T03:59:40.013Z Last Updated: 2024-09-04T18:59:37.028Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-200 Description: Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/11/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
CVE ID: CVE-2023-44116 State: PUBLISHED Published: 2023-10-11T12:01:44.161Z Last Updated: 2024-09-18T15:02:43.370Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-306 Description: Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44117 State: PUBLISHED Published: 2024-01-16T07:49:56.189Z Last Updated: 2025-06-17T20:14:32.534Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-290 Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2024/1/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-0000001799925977
CVE ID: CVE-2023-44118 State: PUBLISHED Published: 2023-10-11T12:02:51.902Z Last Updated: 2024-09-19T13:14:46.256Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44119 State: PUBLISHED Published: 2023-10-11T12:04:19.002Z Last Updated: 2024-09-19T13:11:53.203Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: CWE-667 Description: Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/10/ - https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
CVE ID: CVE-2023-44120 State: PUBLISHED Published: 2024-01-09T09:59:44.755Z Last Updated: 2024-11-14T15:24:09.445Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C) Vendors: Siemens Products: Spectrum Power 7 Problem Types: CWE-732 Description: A vulnerability has been identified in Spectrum Power 7 (All versions < V23Q4). The affected product's sudo configuration permits the local administrative account to execute several entries as root user. This could allow an authenticated local attacker to inject arbitrary code and gain root access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.co
Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cert-portal.siemens.com/productcert/pdf/ssa-786191.pdf
CVE ID: CVE-2023-44121 State: PUBLISHED Published: 2023-09-27T08:36:44.574Z Last Updated: 2024-09-23T18:16:52.161Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-926 Description: The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This vulnerability could be exploited by a third-party app installed on an LG device by sending a broadcast with the action "com.lge.lms.things.notification.ACTION". Additionally, this vulnerability is very dangerous because LG ThinQ Service is a system app (hav
s.notification.ACTION". Additionally, this vulnerability is very dangerous because LG ThinQ Service is a system app (having android:sharedUserId="android.uid.system" setting). Intent redirection in this app leads to accessing arbitrary not exported activities of absolutely all apps. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44122 State: PUBLISHED Published: 2023-09-27T13:42:52.380Z Last Updated: 2024-09-20T19:53:10.421Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-927 Description: The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the
rcepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The LockScreenSettings app copies the received file to the "/data/shared/dw/mycategory/wallpaper_01.png" path and then changes the file access mode to world-readable and world-writable. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44123 State: PUBLISHED Published: 2023-09-27T13:52:57.933Z Last Updated: 2024-09-20T19:52:54.896Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-285 Description: The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Bluetooth ("com.lge.bluetoothsetting") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with the
tercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44124 State: PUBLISHED Published: 2023-09-27T13:55:26.031Z Last Updated: 2024-09-20T19:49:33.791Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-927 Description: The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the
rcepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The Screen recording app saves contents of arbitrary URIs to SD card which is a world-readable storage. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44125 State: PUBLISHED Published: 2023-09-27T13:59:02.183Z Last Updated: 2024-09-20T19:49:11.092Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-285 Description: The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files with system privilege in the Personalized service ("com.lge.abba") app. The attacker's app, if it had access to app notifications, could intercept them and redirect them to its activity, before making it grant access permissions to content providers with
d intercept them and redirect them to its activity, before making it grant access permissions to content providers with the `android:grantUriPermissions="true"` flag. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44126 State: PUBLISHED Published: 2023-09-27T14:01:46.084Z Last Updated: 2024-09-20T19:47:59.285Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-925 Description: The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as call states, durations, called numbers, contacts info, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgs
ontacts info, etc. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44127 State: PUBLISHED Published: 2023-09-27T14:05:24.523Z Last Updated: 2024-09-20T19:46:53.170Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-927 Description: he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all third-party apps installed on the same device. Those intents include data such as contact details and phone numbers. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetai
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44128 State: PUBLISHED Published: 2023-09-27T14:08:51.040Z Last Updated: 2024-09-20T19:45:38.716Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:L) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-367 Description: he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.InstallService" service that exposes an AIDL interface. All its "installPackage*" methods are finally calling the "installPackageVerify()" method that performs signature validation after the delete file method. An attacker can control conditions so this securit
thod that performs signature validation after the delete file method. An attacker can control conditions so this security check is never performed and an attacker-controlled file is deleted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44129 State: PUBLISHED Published: 2023-09-27T14:10:56.347Z Last Updated: 2024-09-23T15:07:26.172Z Severity: LOW (CVSS 3.6 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: LG Electronics Products: LG V60 Thin Q 5G(LMV600VM) Problem Types: CWE-926 Description: The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a broadcast with the "com.lge.message.action.QCLIP" action. The attacker can send, e.g., their own data/clipdata and set
broadcast with the "com.lge.message.action.QCLIP" action. The attacker can send, e.g., their own data/clipdata and set Intent.FLAG_GRANT_* flags. After the attacker received that intent in the "onActivityResult()" method, they would have access to arbitrary content providers that have the `android:grantUriPermissions="true"` flag set. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://lgsecurity.lge.com/bulletins/mobile#updateDetails
CVE ID: CVE-2023-44141 State: PUBLISHED Published: 2023-10-30T03:42:18.099Z Last Updated: 2024-09-06T20:49:59.976Z Vendors: Takuya Matsuyama Products: Inkdrop Problem Types: Code injection Description: Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.inkdrop.app/ - https://forum.inkdrop.app/t/inkdrop-desktop-v5-6-0/4211 - https://jvn.jp/en/jp/JVN48057522/