Alaatk/CVE-2024-27674

Alaatk/CVE-2024-27674

GitHubGitHub
GitHubgithub.com
Releases0
Stars1
Macro Expert <= 4.9.4 - Insecure Permissions Privilege Escalation
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-27674↗
7.8 HIGH—

Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.