CVEvulnerability

CVE-2022-24618

7.8 HIGH Published 2022-03-10 Modified 2026-07-09 Official page ↗
Status
Modified
Published
2022-03-10
Last modified
2026-07-09
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-281

Description

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer.

Affected configurations

• heimdalsecurity heimdal premium security (< 2.5.398)

Related

Weakness · CWE (1)

  • CWE-281 Improper Preservation of Permissions weakness

References