Design/Logic Flaw

This vulnerability allows local attackers to escalate privileges on affected installations of Windscribe. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the configuration of...

CVE-2022-41141

Windscribe VPN on Windows is affected by CVE-2022-41141, where OpenSSL loads a configuration file from an unsecured location. This enables local attackers who can run low-privilege code to escalate to SYSTEM and execute arbitrary code. The issue is documented by ZDI-22-1300 and is reflected acros...