CVE-2024-23746

Miro Desktop 0.8.18 on macOS allows local Electron code injection via a complex series of steps that might be usable in some environments bypass a kTCCServiceSystemPolicyAppBundles requirement via a file copy, an app.app/Contents rename, an asar modification, and a rename back to app.app/Contents...

Exploit for Code Injection in Miro

CVE-2024-23746 Miro Desktop 0.8.18 on macOS allows Electron co...