download the new for windows PDF24 Creator 11.14

The problem occurs as the repair function of the MSI spawns two administrative CMDs.

Prior to version 1.9.2, the MSI installer provided on the homepage allows local privilege escalation (LPE) for low privileged users, if already installed.

Adding a `-NoProfile` to the powershell is a possible workaround.Ĭryptomator is data encryption software for users who store their files in the cloud. Version 1.9.3 contains a fix for this issue. Therefore the profile of the user starting the repair will be loaded. The problem occurs as the repair function of the MSI is spawning an SYSTEM Powershell without the `-NoProfile` parameter. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege escalation for low privileged users, via the `repair` function. This allows an unprivileged local attacker to use a chain of actions (e.g., an oplock on faxPrnInst.log) to open a SYSTEM cmd.exe.Ī local privilege escalation vulnerability in SonicWall Directory Services Connector Windows MSI client 4.1.21 and earlier versions allows a local low-privileged user to gain system privileges through running the recovery feature.Ī local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running repair functionality.Ĭryptomator encrypts data being stored on cloud infrastructure. The configuration of the msi installer file was found to produce a visible cmd.exe window when using the repair function of msiexec.exe. An issue was discovered in PDF24 Creator 11.14.0.

Download the new for windows PDF24 Creator 11.14