Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
IINA before 1.4.3 contains a user-assisted command execution vulnerability that allows remote attackers to execute arbitrary commands by supplying malicious mpv_-prefixed query parameters through the iina://open custom URL scheme handler. Attackers can deliver a crafted URL via a browser that passes unvalidated mpv_options/input-commands parameters into the mpv runtime, causing arbitrary command execution as the current macOS user upon approval of the browser protocol prompt without requiring a valid media file.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
CVE-2026-47114 IINA 1.4.3以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-47114-iina-143/ #IT #Security #cybersecurity
Post summary
The post announces CVE-2026-47114 for IINA 1.4.3, promises an explanation of the vulnerability and countermeasures, but offers no concrete technical, patch, or exploit details.
CVE-2026-47114 IINA 1.4.3以前の脆弱性をわかりやすく解説｜影響範囲と対策まとめ https://www.cybernote.click/2026/06/05/cve-2026-47114-iina-143/ #IT #Security #cybersecurity
Post summary
The article explains CVE-2026-47114, a vulnerability in IINA versions before 1.4.3, detailing its impact and summarizing mitigation measures.