What’s Vulnerable › Vulnerabilities

CVE-2024-46966

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-11 · updated 2026-06-17
• Weakness: CWE-94

Description

The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component.

Affected products

• Android: before 1.0.42 — fixed in 1.0.42

How to fix

Upgrade to a fixed version: Android 1.0.42. Check the vendor advisory for mitigations.

References

• https://github.com/actuator/mn.ikhgur.khotoch/blob/main/CVE-2024-46966
• https://play.google.com/store/apps/details?id=mn.ikhgur.khotoch

Get alerted when CVE-2024-46966 or the next vulnerability affects your stack