PT-2018-10066

Name of the Vulnerable Software and Affected Versions Cylance CylancePROTECT versions prior to 1470 Description The issue allows an unprivileged local user to obtain SYSTEM privileges. This is possible because users have Modify access to the %PROGRAMFILES%CylanceDesktoplog folder. The CyUpdate...

CVE-2018-10722: Improper Link Resolution Before File Access

In Cylance CylancePROTECT before 1470, an unprivileged local user can obtain SYSTEM privileges because users have Modify access to the %PROGRAMFILES%\Cylance\Desktop\log folder, the CyUpdate process grants users Modify access to new files created in this folder, and a new file can be a symlink...