CVE-2024-46966: Google Android

High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days.

The Ikhgur mn.ikhgur.khotoch (aka Video Downloader Pro & Browser) application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component.

Affected products

• Google Android: before 1.0.42 (fixed in 1.0.42)

Published 2024-11-11. Last modified 2026-06-17.