CVEvulnerability
CVE-2023-31462
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-07-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-276
Description
An issue was discovered in SteelSeries GG 36.0.0. An attacker can change values in an unencrypted database that is writable for all users on the computer, in order to trigger code execution with higher privileges.
Affected configurations
• steelseries gg 36.0.0
Related
Weakness · CWE (1)
- CWE-276 Incorrect Default Permissions weakness
References
- https://steelseries.com/gg Product
- https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation Exploit, Third Party Advisory
- https://steelseries.com/gg Product
- https://www.akamai.com/blog/security-research/exploit-steelseries-subapp-privilege-escalation Exploit, Third Party Advisory