CVE-2022-1824

HIGH Year: 2022
CVSS v3 Score
8.2
High
CVSS v2 Score
4.4
Medium
Weakness Type
CWE-427
View all →

Vulnerability Description

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary code as there were insufficient checks on the executable being signed by McAfee.

Related Vulnerabilities

CVE-2023-0142

HIGH
CVSS:8.1(High)

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated us...

CWE-4272023

CVE-2017-7884

HIGH
CVSS:8.4(High)

In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unprivileged, user to run arbitrary code with elevated privileges by repl...

CWE-4272017

CVE-2019-4094

HIGH
CVSS:8.4(High)

IBM DB2 for Linux, UNIX and Windows (includes DB2 Connect Server) 9.7, 10.1, 10.5, and 11.1 binaries load shared libraries from an untrusted path potentially giving low privilege user full access to r...

CWE-4272019

CVE-2019-4447

HIGH
CVSS:8.4(High)

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum_debug is a setuid root binary which trusts the PATH environment variable. A low pr...

CWE-4272019

CVE-2019-4473

HIGH
CVSS:8.4(High)

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-F...

CWE-4272019

CVE-2020-3535

HIGH
CVSS:8.4(High)

A vulnerability in the loading mechanism of specific DLLs in the Cisco Webex Teams client for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerab...

CWE-4272020