CVE-2021-33436

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading

published April 28, 2022

CVSS
—
EPSS
0%
Percentile
20.2
In the wild
Unconfirmed
What it is

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00287 · 20.2th percentile
Published
2022-04-28T10:57Z
EPSS history
Timeline
  • 28 APR 10:57Z
    NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading
    cvelistv5