Exploit for CVE-2022-27502

RealVNC server up to 6.9.0 DLL Hijacking Exploit CVE-2022-275...

CVE-2022-27502

CVE-2022-27502 concerns RealVNC VNC Server on Windows (versions 6.9.0–5.1.0) where an MSI repair operation can execute files from %TEMP% as SYSTEM, enabling local privilege escalation. A GitHub exploit shows a DLL hijacking method that places a payload in %TEMP% and triggers a repair, causing the...

CVE-2022-27502

RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operation executes %TEMP% files as SYSTEM...