EUVD-2026-112140

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-112357 GFI KerioConnect KOFF < 10.0.9p2 Privilege Escalation

GFI KerioConnect Kerio Connect Outlook Connector Offline Edition, 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can...

CVE-2026-112357

GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition) , 'KOFF', versions before 10.0.9 Patch 2 is vulnerable to a local privilege escalation flaw. The root cause is weak installer permissions that allow the built-in Users group to write to the product directory. A local non-adminis...