Missing Quarantine Attributes in MacPaw The Unarchiver Product
CVE-2023-46270

3.3LOW

Key Information:

Vendor

MacPaw

Vendor
CVE Published:
29 April 2024

What is CVE-2023-46270?

The Unarchiver by MacPaw, prior to version 4.3.6, exhibits a vulnerability concerning missing quarantine attributes for extracted items. This flaw can expose users to significant security risks as files extracted from potentially harmful archives are not properly quarantined. As a consequence, malicious files may execute without appropriate user awareness or system protection measures in place, increasing the likelihood of security incidents.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://theunarchiver.com
https://updates.devmate.com/releasenotes/143/com.macpaw.s...

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.