A remote code execution vulnerability in the webview component
CVE-2023-26309

7.4HIGH

Key Information:

Vendor

Oppo

Status
Oneplus Store
Vendor
CVE Published:
10 August 2023

What is CVE-2023-26309?

A vulnerability exists in the webview component of the OnePlus Store app, which allows an attacker to execute arbitrary code on a user's device remotely. This issue could be exploited through malicious web content, potentially compromising the privacy and security of users' data. Users are advised to apply security updates to mitigate potential risks associated with this vulnerability.

Affected Version(s)

OnePlus Store 3.3.0

References

https://security.oppo.com/en/noticeDetail?notice_only_key...

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.