User Interface Information Disclosure in Telegram for iOS
CVE-2023-34658

5.3MEDIUM

Key Information:

Vendor: Telegram
Status: Telegram
Vendor: CVE Published:; 29 June 2023

What is CVE-2023-34658?

In Telegram version 9.6.3 for iOS, a vulnerability allows attackers to manipulate the User Interface by calling the SFSafariViewController function, potentially hiding critical information from users. This can lead to a deceptive user experience and may result in the unauthorized disclosure of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://crsrg.sh/crsrg-2308101/

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jun 29, 2023
Vulnerability Reserved
Jun 7, 2023

JSON

Telegram

What is CVE-2023-34658?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.