CVE-2024-9496

creationtimestamp| type| source ---|---|--- 2025-01-24 14:43:20+00:00| seen| https://infosec.exchange/users/cve/statuses/113883860163284804 2025-01-24 15:04:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2909 2025-01-24 15:49:01+00:00| seen|...

CVE-2024-9496 Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9496 Uncontrolled search path can lead to DLL hijacking in USBXpress Dev Kit installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

CVE-2024-9496

CVE-2024-9496 concerns the USBXpress Dev Kit installer from Silicon. The vulnerability is an uncontrolled search path that enables DLL hijacking in the installer process. The resulting impact, as stated across sources, is privilege escalation and arbitrary code execution when the impacted install...