CVE-2023-44105

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Vulnerability of permissions not being strictly verified in the window management module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published
Oct 11, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-441069.8API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perforCVE-2023-441079.1Vulnerability of defects introduced in the design process in the screen projection module.Successful exploitation of this vulnerability may CVE-2023-441087.5Type confusion vulnerability in the distributed file module.Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-441097.5Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-44119.8A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the funcCVE-2023-441104.3Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-441117.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service coCVE-2023-441127.5Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiaCVE-2023-441137.5Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vulnCVE-2023-441147.5Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-441157.5Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect serviceCVE-2023-441169.8Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may ca
CVE-2023-44105: Critical severity, CVSS 9.8 | Vulnix