CVE-2023-49347

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-14 · updated 2026-06-17
Weakness: CWE-377

Description

Temporary data passed between application components by Budgie Extras Windows Previews could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may read private information from windows, present false information to users, or deny access to the application.

Affected products

Ubuntu Budgie Budgie Extras: from 1.4.0 before 1.7.1 — fixed in 1.7.1

How to fix

Upgrade to a fixed version: Ubuntu Budgie Budgie Extras 1.7.1. Check the vendor advisory for mitigations.

References

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347
https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj
https://ubuntu.com/security/notices/USN-6556-1
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-49347
https://github.com/UbuntuBudgie/budgie-extras/security/advisories/GHSA-xxfq-fqfp-cpvj
https://ubuntu.com/security/notices/USN-6556-1

Get alerted when CVE-2023-49347 or the next vulnerability affects your stack