← Back to CVE List

CVE-2024-38456

Published: 2024-09-03T18:15Z
Last Modified: 2024-11-21T09:25Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
HIGH-LEIT V05.08.01.03 and HIGH-LEIT V04.25.00.00 to 4.25.01.01 for Windows from Vivavis contain an insecure file and folder permissions vulnerability in prunsrv.exe. A regular user (non-admin) can exploit the weak folder and file permissions to escalate privileges and execute arbitrary code in the context of NT AUTHORITY\SYSTEM. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt