CVE-2024-12552

CVE-2024-12552 affects Wacom Center via WTabletServicePro.exe. An attacker who can run low-privileged code locally can abuse a symbolic link to create an arbitrary file, enabling privilege escalation to SYSTEM. Public references (ZDI-24-1683) describe the flaw but do not include exploitation deta...

CVE-2024-9766

CVE-2024-9766 concerns Wacom Center’s WTabletServicePro. The vulnerability arises from symbolic-link abuse in the WTabletServicePro process, enabling a local attacker who can run low-privileged code to cause the service to create a file and escalate to SYSTEM, gaining arbitrary code execution. Th...