CVE-2018-10722

CVE-2018-10722 concerns CylancePROTECT (pre-1470) where an unprivileged local user can escalate to SYSTEM due to overly permissive access to the log folder under %PROGRAMFILES%\Cylance\Desktop\log. The CyUpdate process grants users Modify rights to new files created there, allowing a symlink chai...