CVE Catalog

CVE-2014-9733

Critical
Published: Translated: NVD NIST

Summary

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.

Risk Assessment

The organization may be vulnerable to attacks that exploit this vulnerability to take control of user interactions, potentially leading to unauthorized access or data manipulation.

Recommendation

It is recommended to update nw.js to version 0.11.5 or later to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS