CVE-2024-37742

Insecure Access Control in Safe Exam Browser (SEB) = 3.5.0 on Windows. The vulnerability allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity. By exploiting this flaw, an attacker can bypass exam controls and gain an unfair advantage during exams.

CVSS v3.1

8.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS

0.51% chance of exploitation in the next 30 days, 41th percentile

Published

2024-06-25

Updated

2024-08-02

Proof-of-concept exploits (2)

• Aar0nD0m1n1c/CVE-2024-37742
• tungdn9988/CVE-2024-37742

References

• CVE Record
• NVD entry

Related

• CVE-2024-37734
• CVE-2024-37759
• CVE-2024-37728
• CVE-2024-37762
• CVE-2024-37726
• CVE-2024-37763