CVE-2021-24038CWE-269

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to…

published August 18, 2021

CVSS
—
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2021-08-18T23:35Z
EPSS history
Timeline
  • 18 AUG 23:35Z
    Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to…
    cvelistv5