CVE-2023-41304

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-754

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-413057.5Vulnerability of 5G messages being sent without being encrypted in a VPN environment in the SMS message module. Successful exploitation of tCVE-2023-413063.7Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may caCVE-2023-413077.5Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability.CVE-2023-413087.5Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2023-413097.5Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availabilitCVE-2023-413103.3Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run coCVE-2023-413115.3Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatCVE-2023-413125.3Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated aCVE-2023-413139.8The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to versioCVE-2023-413148.2The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE nCVE-2023-413165.4Tolgee is an open-source localization platform. Due to lack of validation field - Org Name, bad actor can send emails with HTML injected codCVE-2023-413175.9The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation
CVE-2023-41304: Medium severity, CVSS 5.3 | Vulnix