CVE-2024-40433

2024-07-2600:00:00

mitre

github.com

insecure permissions

tencent wechat

vulnerability

web-view component

privilege escalation

AI Score

7.3

Confidence

Low

SSVC

Exploitation

poc

Automatable

Technical Impact

total

JSON

Insecure Permissions vulnerability in Tencent wechat v.8.0.37 allows an attacker to escalate privileges via the web-view component.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:tencent:wechat:8.0.37:*:*:*:*:*:*:*"
    ],
    "vendor": "tencent",
    "product": "wechat",
    "versions": [
      {
        "status": "affected",
        "version": "8.0.37"
      }
    ],
    "defaultStatus": "unknown"
  }
]