{"id":"CVE-2018-14023","aliases":["EUVD-2018-5953","GHSA-8392-9r3r-6m6x"],"status":"published","title":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","severity":{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0047,"percentile":0.40889,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-08-20T22:00:00Z","modified":"2026-10-24T10:30:40Z","products":[{"vendor":"signal","product":"signal-desktop"}],"references":[{"url":"http://n0sign4l.blogspot.com/2018/08/advisory-id-n0sign4l-002-risk-level-4-5.html?m=1","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://www.youtube.com/watch?v=oSJscEei5SE\u0026app=desktop","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14023"},{"url":"https://github.com/advisories/GHSA-8392-9r3r-6m6x"}],"sources":{"cve":[{"id":"CVE-2018-14023","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","status":"published","published":"2018-08-20T22:00:00Z","modified":"2024-08-05T09:21:40.64Z","updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-5953","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","status":"published","published":"2018-08-20T22:00:00Z","modified":"2024-08-05T09:21:40Z","updated_at":"2026-11-03T02:39:47.770292Z"}],"ghsa":[{"id":"GHSA-8392-9r3r-6m6x","title":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","status":"published","published":"2022-05-14T02:21:28Z","modified":"2023-02-02T05:06:00Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:52:13.176189Z"}],"nvd":[{"id":"CVE-2018-14023","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","status":"published","published":"2018-08-20T22:29:00.483Z","modified":"2026-06-17T01:40:30.02Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:36.842579Z"}],"osv":[{"id":"CVE-2018-14023","description":"Open Whisper Signal (aka Signal-Desktop) before 1.15.0-beta.10 allows information leakage.","status":"published","published":"2018-08-20T22:29:00.483Z","modified":"2026-10-24T10:30:40.109180416Z","cvss":[{"version":"3.0","score":4,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:08.242347Z"}]}}