Clario for Windows Desktop DLL Hijacking / Privilege Escalation

Clario for Windows Desktop versions through 2024-04-11 contain weak permissions on ProgramData directories and load missing DLL files from them as SYSTEM, allowing a local low-privileged user to execute code with SYSTEM privileges...