CVE-2022-48222

An issue was discovered in Acuant AcuFill SDK before 10.22.02.03. During SDK installation, certutil.exe is called by the Acuant installer to install certificates. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full...

CVE-2022-48222

Summary: CVE-2022-48222 affects Acuant AcuFill SDK prior to version 10.22.02.03. During installation, certutil.exe is invoked by the installer to install certificates; the window is not hidden and runs with elevated privileges. A standard user can break out of this window and obtain a full SYSTEM...