CVE-2023-49001

9.8 criticalEPSS 0.8%

Critical (9.8) in indibrowser indi browser. EPSS 0.8% chance of exploitation in the next 30 days.

An issue in Indi Browser (aka kvbrowser) v.12.11.23 allows an attacker to bypass intended access restrictions via interaction with the com.example.gurry.kvbrowswer.webview component.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2023-12-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

indibrowser:indi_browser

References

https://github.com/actuator/com.gurry.kvbrowser/blob/main/CWE-94.md
https://github.com/actuator/cve/blob/main/CVE-2023-49001
https://github.com/actuator/com.gurry.kvbrowser/blob/main/CWE-94.md
https://github.com/actuator/cve/blob/main/CVE-2023-49001

Check your stack JSON