CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

vulnrichment•added 2023/03/03 12:0 a.m.•4 views

CVE-2023-27574

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODESIGNINGINJECTBASEENTITLEMENTS...

7.2AI score0.00385EPSS

Exploits0References2

cve•added 2023/03/03 12:0 a.m.•60 views

CVE-2023-27574

ShadowsocksX-NG 1.10.0 is affected by CVE-2023-27574 due to CODE_SIGNING_INJECT_BASE_ENTITLEMENTS that causes signing with com.apple.security.get-task-allow entitlements. The CVSSv3.1 base score is 9.8 (CRITICAL) with network attack vector, no user interaction, and impact to confidentiality, inte...

9.8CVSS9.4AI score0.00385EPSS

Exploits0References2Affected Software1