CVE-2022-32450

creationtimestamp| type| source ---|---|--- 2022-07-18 16:36:29+00:00| seen| https://t.me/cibsecurity/46445...

CVE-2022-32450

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder used for ad.trace and chat but the product runs as SYSTEM when writing chat-room data there...

CVE-2022-32450

CVE-2022-32450 concerns AnyDesk 7.0.9, where a local user can gain SYSTEM privileges via a symbolic link. The root cause: the user is allowed to write to their own %APPDATA% folder (used for ad.trace and chat), but AnyDesk runs as SYSTEM when writing chat-room data there, enabling privilege escal...