Vulnerability · Published Sep 8, 2023 · Assigned by jpcert
CVE-2023-41775
Medium 5.5
In plain English
A medium-severity security flaw in 'direct' Desktop App for macOS from L is B Corp.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 7% of all known vulnerabilities).
Severity (CVSS NVD)5.5Medium
Exploit odds (30 days)0.2%top 93.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use camrea, microphone, etc. of the device where the product is installed without the user's consent.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| L is B Corp. | 'direct' Desktop App for macOS | ver 2.6.0 and earlier |