CVE-2019-16860

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path

published November 19, 2019

CVSS
—
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Code42 app through version 7.0.2 for Windows has an Untrusted Search Path. In certain situations, a non-administrative attacker on the local machine could create or modify a dynamic-link library (DLL). The Code42 service could then load it at runtime, and potentially execute arbitrary code at an elevated privilege on the local machine.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00371 · 29.9th percentile
Published
2019-11-19T12:44Z
EPSS history
Timeline
  • 19 NOV 12:44Z
    Code42 app through version 7.0.2 for Windows has an Untrusted Search Path
    cvelistv5