CVE-2024-20120

In KeyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08956986; Issue ID: MSV-1575...

CVE-2024-20120

CVE-2024-20120 concerns a bound-check failure in KeyInstall that enables an out-of-bounds write, leading to local privilege escalation with SYSTEM-level execution privileges required and no user interaction needed. Multiple sources (NVD, Red Hat, CVE lists, and vuln enrichment) confirm the issue ...