CVE-2024-22002

creationtimestamp| type| source ---|---|--- 2026-08-29 23:00:04+00:00| seen| Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU 2026-08-30 00:00:09+00:00| published-proof-of-concept| Telegram/ZCILXLquzGbXFQcaZlOXv9dkF48Tloh98M2Ojf7eGNskguU...

CVE-2024-22002

The CORSAIR iCUE v5.9.105 (with iCUE Murals) on Windows is vulnerable to a DLL hijacking flaw within the iCUEUpdateService . This service spawns cuepkg.exe with NT AUTHORITYlingling (SYSTEM) privileges, which searches the uepkg-1.2.6 subdirectory for dynamic libraries. Because unprivileged user...