Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-327c-mq4q-4h9h

Опубликовано: 22 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.5

Описание

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all versions after 22.6.22.1329 and was fixed in 25.12.3.1745.

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all versions after 22.6.22.1329 and was fixed in 25.12.3.1745.

EPSS

Процентиль: 1%
0.00101
Низкий

8.5 High

CVSS4

Дефекты

CWE-276

Связанные уязвимости

nvd
4 месяца назад

Incorrect Default Permissions in pcvisit service binary on Windows allows a low-privileged local attacker to escalate their privileges by overwriting the service binary with arbitrary contents. This service binary is automatically launched with NT\SYSTEM privileges on boot. This issue affects all versions after 22.6.22.1329 and was fixed in 25.12.3.1745.

EPSS

Процентиль: 1%
0.00101
Низкий

8.5 High

CVSS4

Дефекты

CWE-276