← voltar
CVE-2023-4936

Synaptics-DisplayLink-privilege escalation vulnerability via a dynamic library sideloading

CVSS 5.5 MEDIUMEPSS 0.2%CWE-269
It is possible to sideload a compromised DLL during the installation at elevated privilege.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L
Produtos afetados
Synaptics · DisplayLink USB Graphics Software for Windows

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://www.synaptics.com/https://www.synaptics.com/products/displaylink-graphics/downloads/windowshttps://www.synaptics.com/sites/default/files/nr-154525-tc-synaptics_displaylink_windows_driver_security_brief_-_oct2023.pdf