CVE-2023-49000

9.8 criticalEPSS 0.9%

Critical (9.8) in artistscope artisbrowser. EPSS 0.9% chance of exploitation in the next 30 days.

An issue in ArtistScope ArtisBrowser v.34.1.5 and before allows an attacker to bypass intended access restrictions via interaction with the com.artis.browser.IntentReceiverActivity component. NOTE: this is disputed by the vendor, who indicates that ArtisBrowser 34 does not support CSS3.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2023-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

artistscope:artisbrowser

References

https://github.com/actuator/com.artis.browser/blob/main/CWE-94.md
https://github.com/actuator/cve/blob/main/CVE-2023-49000
https://github.com/advisories/GHSA-866h-q63m-66xm
https://github.com/actuator/com.artis.browser/blob/main/CWE-94.md
https://github.com/actuator/cve/blob/main/CVE-2023-49000

Check your stack JSON