CVE-2020-24567

voidtools Everything before 1.4.1 Beta Nightly 2020-08-18 allows privilege escalation via a Trojan horse urlmon.dll file in the installation directory. NOTE: this is only relevant if low-privileged users can write to the installation directory, which may be considered a site-specific configuration error

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.56% chance of exploitation in the next 30 days, 44th percentile

Published

2020-08-21

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.cymaera.com/articles/everything.html

References

• CVE Record
• NVD entry

Related

• CVE-2020-24553
• CVE-2020-24571
• CVE-2020-24550
• CVE-2020-24572
• CVE-2020-24549
• CVE-2020-24574