writeups.xyz / CVE-2023-24068 && CVE-2023-24069: Abusing Signal Desktop Client for fun and for Espionage

Submitter : c2a

Date: 22 January 2023

Bounty : undisclosed

Vulnerabilities :

• Thick Client
• Insecure Data Storage
• Local Privilege Escalation

Programs :

• Signal

Authors :

• John Jackson (@Johnjhacking)

Link :
https://johnjhacking.com/blog/cve-2023-24068-cve-2023-24069/