CVE-2023-37250

CVE-2023-37250

Unity Parsec before 8 has a TOCTOU race condition that permits local attackers to escalate privileges to SYSTEM if Parsec was installed in "Per User" mode. The application intentionally launches DLLs from a user-owned directory but intended to always perform integrity verification of those DLLs.

Source: CVE-2023-37250

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다