CVE-2022-41975

CVE-2022-41975 – RealVNC Server/Viewer local privilege escalation : RealVNC VNC Server prior to 6.11.0 and VNC Viewer prior to 6.22.826 on Windows are vulnerable due to insecure privilege management in MSI installer Repair mode, enabling local privilege escalation. Affected components: RealVNC VN...

CVE-2022-27502

CVE-2022-27502 concerns RealVNC VNC Server on Windows (versions 6.9.0–5.1.0) where an MSI repair operation can execute files from %TEMP% as SYSTEM, enabling local privilege escalation. A GitHub exploit shows a DLL hijacking method that places a payload in %TEMP% and triggers a repair, causing the...