CVE-2019-19954

Signal Desktop (Windows) prior to 1.29.1 contains a local privilege escalation flaw: an attacker can place a Trojan horse named wmic.exe under %SYSTEMDRIVE%\node_modules.bin to gain higher privileges. Descriptions across NVD, Red Hat, OSV, ENISA-related entries corroborate the same issue. No func...

CVE-2019-19954

Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\nodemodules.bin\wmic.exe file...