CVE-2022-24618

2022-03-0911:40:59

mitre

www.cve.org

heimdal premium security

insecure permissions

privilege escalation

browse for folder" window

AI Score

7.7

Confidence

High

EPSS

Percentile

5.1%

JSON

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the “Browse For Folder” window accessible by triggering a “Repair” on the MSI package located in C:\Windows\Installer.