Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-wcvq-gwcq-gwhf

Опубликовано: 05 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-427

Связанные уязвимости

CVSS3: 7.8
nvd
около 1 месяца назад

An issue was discovered in Samsung Magician 6.3.0 through 8.3.2 on Windows. The installer creates a temporary folder with weak permissions during installation, allowing a non-admin user to perform DLL hijacking and escalate privileges.

CVSS3: 7.8
fstec
6 месяцев назад

Уязвимость установщика программы для управления SSD-дисками Samsung Magician, позволяющая нарушителю повысить свои привилегии и реализовать атаку типа DLL Hijacking

EPSS

Процентиль: 1%
0.0001
Низкий

7.8 High

CVSS3

Дефекты

CWE-427