CVE-2021-38112

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework CEF --gpu-launcher argument. This is fixed in 3.1.9...

CVE-2021-38112

In the Amazon AWS WorkSpaces client 3.0.10 through 3.1.8 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework CEF --gpu-launcher argument. This is fixed in 3.1.9...

CVE-2021-38112

CVE-2021-38112 affects the Amazon AWS WorkSpaces Windows client versions 3.0.10 through 3.1.8. The vulnerability is caused by argument injection in the workspaces:// URI handler via the Chromium Embedded Framework (CEF) --gpu-launcher argument, which can lead to remote code execution. The issue i...

CVE-2021-38112: AWS WorkSpaces Remote Code Execution

The post CVE-2021-38112: AWS WorkSpaces Remote Code Execution appeared first on Rhino Security Labs...