CVE-2023-41308

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Screenshot vulnerability in the input module. Successful exploitation of this vulnerability may affect confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Sep 27, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-413097.5Permission control vulnerability in the MediaPlaybackController module. Successful exploitation of this vulnerability may affect availabilitCVE-2023-413103.3Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run coCVE-2023-413115.3Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause an app to be activated automatCVE-2023-413125.3Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause several apps to be activated aCVE-2023-413139.8The authentication method in Apache Doris versions before 2.0.0 was vulnerable to timing attacks. Users are recommended to upgrade to versioCVE-2023-413148.2The api /api/snapshot and /api/get_log_file would allow unauthenticated access. It could allow a DoS attack or get arbitrary files from FE nCVE-2023-413165.4Tolgee is an open-source localization platform. Due to lack of validation field - Org Name, bad actor can send emails with HTML injected codCVE-2023-413175.9The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo FederationCVE-2023-413185.4matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker couCVE-2023-413197.2Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and theCVE-2023-41325.5A use-after-free vulnerability was found in the siano smsusb module in the Linux kernel. The bug occurs during device initialization when thCVE-2023-413209.8GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk
CVE-2023-41308: High severity, CVSS 7.5 | Vulnix