CVE Catalog
CVE-2023-50643
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk1.70%
74th percentile - higher than 74% of all known CVEs
Summary
A vulnerability in Evernote for macOS version 10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components.
Risk Assessment
An attacker can remotely take control of the macOS system, leading to data theft, malware installation, or complete security compromise.
Recommendation
It is recommended to immediately update Evernote to the latest available version and monitor vendor announcements for security patches.
Original NVD description (English source)
An issue in Evernote Evernote for MacOS v.10.68.2 allows a remote attacker to execute arbitrary code via the RunAsNode and enableNodeClilnspectArguments components.