CVE-2018-19592

CVE-2018-19592 describes an privilege-escalation via the Corsair Link/Corsair Service (CLink4Service) installed with insecure default permissions. Local unprivileged users can modify the service configuration or binary path to run commands in NT AUTHORITY\SYSTEM context, enabling complete system ...