CVE-2019-19954

Published December 24th, 2019

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

6.9

MEDIUM

Affected

PROJECT

Description

Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules\.bin\wmic.exe file.

signalapp/Signal-Desktop

A private messenger for Windows, macOS, and Linux.

GitHub

16.3K