CVE-2023-49313

9.8 criticalEPSS 1.3%

Critical (9.8) in horsicq xmachoviewer. EPSS 1.3% chance of exploitation in the next 30 days.

A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the product's processes, potentially leading to remote control and unauthorized access to sensitive user data.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2023-11-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

horsicq:xmachoviewer

References

https://github.com/horsicq/XMachOViewer
https://github.com/louiselalanne/CVE-2023-49313
https://github.com/horsicq/XMachOViewer
https://github.com/louiselalanne/CVE-2023-49313

Check your stack JSON