CVE-2021-40854

Product/affected: AnyDesk Desktop (Windows). Vulnerability: Local privilege escalation via the Open Chat Log feature, which can launch a privileged Notepad process to spawn other applications. Root cause: Privilege escalation path through a trusted UI component enabling elevated process creation....