CVE-2021-24038

CVE-2021-24038 affects Oculus Desktop where a bug in the management of handles in OVRServiceLauncher.exe can expose a privileged process handle to an unprivileged process, enabling local privilege escalation . Impact is described for Oculus Desktop versions after 1.39 and before 31.1.0.67.507. Th...

CVE-2020-1885

CVE-2020-1885 affects Oculus Desktop on Windows prior to 1.44.0.32849. A privileged OVRRedir.exe process can write to an unprivileged destination via a hard link to a log file, enabling local privilege escalation to arbitrary files. The issue is described as local privilege elevation stemming fro...