88 matches found
CVE-2022-41141: Uncontrolled Search Path Element
This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...
Windscribe VPN code-related vulnerabilities
Windscribe VPN is an application from Windscribe Canada. A VPN. Windscribe VPN suffers from a security vulnerability that stems from loading an OpenSSL configuration file from an insecure location...
CVE-2022-41141
Windscribe VPN on Windows is affected by CVE-2022-41141, where OpenSSL loads a configuration file from an unsecured location. This enables local attackers who can run low-privilege code to escalate to SYSTEM and execute arbitrary code. The issue is documented by ZDI-22-1300 and is reflected acros...
PT-2022-25671 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: Windscribe affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system in order...
Windscribe Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...
Windscribe elevation of privilege vulnerability (CNVD-2021-39545)
Windscribe VPN is a VPN software from Windscribe Canada. An elevation of privilege vulnerability exists in Windscribe version 1.83 Build 20. An attacker can exploit this vulnerability for elevation of privilege...
CVE-2020-22809
In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...
CVE-2020-22809
In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...
CVE-2020-22809
In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...
CVE-2020-22809
CVE-2020-22809 affects Windscribe v1.83 Build 20, where the WindscribeService uses an Unquoted Service Path, enabling privilege escalation. The issue is described as a local privilege escalation via an unquoted service path in the WindscribeService executable, with the exploitation vector being l...
CVE-2020-22809: Unquoted Search Path or Element
In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation...
PT-2021-10797
Name of the Vulnerable Software and Affected Versions Windscribe version 1.83 Build 20 Description The issue is related to an Unquoted Service Path in the 'WindscribeService' of Windscribe, which can facilitate privilege escalation. Recommendations For Windscribe version 1.83 Build 20, consider...
Windscribe code issue vulnerabilities
Windscribe VPN is a VPN software from Windscribe Canada. An elevation of privilege vulnerability exists in Windscribe version 1.83 Build 20. An attacker can exploit this vulnerability for elevation of privilege...
CVE-2020-27518
All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...
CVE-2020-27518
All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...
Privilege escalation
All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...
CVE-2020-27518
All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...
CVE-2020-27518
CVE-2020-27518 concerns Windscribe VPN for Mac and Windows, versions
PT-2021-11399
Name of the Vulnerable Software and Affected Versions: Windscribe VPN for Mac and Windows versions = 2.02.10 Description: The issue concerns a local privilege escalation vulnerability in the WindscribeService component. This vulnerability allows a low-privilege user to potentially execute code as...
CVE-2020-27518: Improper Privilege Management
All versions of Windscribe VPN for Mac and Windows = v2.02.10 contain a local privilege escalation vulnerability in the WindscribeService component. A low privilege user could leverage several openvpn options to execute code as root/SYSTEM...