CVE-2020-26085: critical vulnerability in Cisco Jabber
Cisco Jabber Desktop and Mobile Client Software Vulnerabilities
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Cisco Jabber messaging app has critical flaws that let attackers run malicious programs with high-level system access or steal sensitive data on Windows, Mac, and mobile devices.
Multiple vulnerabilities in Cisco Jabber clients enable arbitrary code execution with elevated OS privileges or unauthorized information disclosure. Attack vectors include crafted application inputs and malicious content delivery. Successful exploitation grants attacker system-level access to the compromised device.
In the same product, most dangerous first.