CVE-2023-45160

CVE-2023-45160 is a high-severity vulnerability affecting the 1E Client, allowing an authenticated, low-privileged attacker to achieve high impact to confidentiality, integrity, and availability. By replacing legitimate instruction resource files with malicious scripts in the client's temporary directory, an attacker could execute arbitrary code. While no public exploits or active exploitation have been observed, the vulnerability carries a CVSS score of 8.8 and has been addressed in patch Q23094 for Windows and updated versions of the Mac Client.