CVE-2023-32546

low-risk

Published 2023-06-13

Code injection vulnerability exists in Chatwork Desktop Application (Mac) 2.6.43 and earlier. If this vulnerability is exploited, a non-administrative user of the Mac where the product is installed may store and obtain audio and image data from the product without the user's consent.

Do I need to act?

0.05% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (1)

Chatwork

Affected Vendors

Chatwork

References (4)

Product https://go.chatwork.com/ja/download/

Third Party Advisory https://jvn.jp/en/jp/JVN96828492/

Product https://go.chatwork.com/ja/download/

Third Party Advisory https://jvn.jp/en/jp/JVN96828492/

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal