CVE-2021-22000

VMware Thinapp version 5.x prior to 5.2.10 contain a DLL hijacking vulnerability due to insecure loading of DLLs. A malicious actor with non-administrative privileges may exploit this vulnerability to elevate privileges to administrator level on the Windows operating system having VMware ThinApp installed on it.

CVSS v3.1

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.56% chance of exploitation in the next 30 days, 45th percentile

Published

2021-07-13

Updated

2024-08-03

Proof-of-concept exploits (1)

• http://packetstormsecurity.com/files/163521/VMware-ThinApp-DLL-Hijacking.html

References

• CVE Record
• NVD entry

Related

• CVE-2021-21994
• CVE-2021-22005
• CVE-2021-21990
• CVE-2021-22006
• CVE-2021-21985
• CVE-2021-22015