VULNERABILITY INTELLIGENCE

CVE-2022-23763

CVSS score7.8 HIGH
EPSS probability0.34%
CISA KEVNot currently listed
Published2022-06-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

Weakness classification

  • vuln@krcert.or.kr: CWE-346
  • nvd@nist.gov: CWE-346

Primary references