Threats tagged 'ghsa-hggh-f6m4-4c3w'

CVE-2024-50591 is a local privilege escalation vulnerability in the Elefant Update Service used in medical office computers. An attacker with local user access can exploit a command injection flaw via Windows Named Pipes communication to escalate privileges to NT AUTHORITY\SYSTEM. The vulnerability arises from the Elefant Software Updater service running as SYSTEM and accepting crafted messages that allow command injection. The CVSS score is 7.8, indicating high severity.