CVE-2023-35373 is a Mono Authenticode Validation Spoofing Vulnerability affecting Microsoft Mono, allowing an attacker to bypass signature validation. With a CVSS score of 5.3 (Medium), this vulnerability requires low privileges and high attack complexity, but can lead to high integrity impacts. There is no evidence of active exploitation, public exploit code, or significant community discussion, with only one media article mentioning it as part of a larger patch Tuesday release.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.12.0, < 6.12.0.200CPE matchmatch criteria | cpe:2.3:a:microsoft:mono:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.