CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory...

CVE-2024-22002

The CORSAIR iCUE v5.9.105 (with iCUE Murals) on Windows is vulnerable to a DLL hijacking flaw within the iCUEUpdateService . This service spawns cuepkg.exe with NT AUTHORITYlingling (SYSTEM) privileges, which searches the uepkg-1.2.6 subdirectory for dynamic libraries. Because unprivileged user...