Threats tagged 'ghsa-fh7h-qp2r-qp8p'

CVE-2024-50592 is a local privilege escalation vulnerability in the Elefant Update Service used in medical office computers. An attacker with local access can exploit a race condition during the repair or update process to overwrite executables in a user-writable installation folder. These executables are then run with NT AUTHORITY\SYSTEM privileges, allowing the attacker to escalate their privileges to SYSTEM level.