CVE-2022-36414

CVE-2022-36414 describes an elevation-of-privilege breakout in the Windows EXE installer of Scooter Beyond Compare (versions 4.2.0–4.4.2) that can allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation. Affected versions require u...

CVE-2022-36415

Scooter Software Beyond Compare is affected by a DLL hijacking vulnerability in its uninstaller for versions 1.8a through 4.4.2 installed via the EXE installer. The uninstaller loads DLLs from the Windows Temp folder and, if a standard user places malicious DLLs there and the uninstaller runs wit...