CVE-2022-36414 Privilege escalation in n/a
A logged-in user can escalate privileges by exploiting the Windows EXE installer in Beyond Compare to run applications with elevated rights.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-36414?
CVE-2022-36414 is a medium-severity vulnerability in n/a, published on 23 Jul 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
There is an elevation of privilege breakout vulnerability in the Windows EXE installer in Scooter Beyond Compare 4.2.0 through 4.4.2 before 4.4.3. Affected versions allow a logged-in user to run applications with elevated privileges via the Clipboard Compare tray app after installation.
Which versions are affected by CVE-2022-36414?
It affects 1 product.
Products include Scootersoftware Beyond Compare.
How do I fix CVE-2022-36414?
No fix has been published for CVE-2022-36414 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-36414 being exploited?
There is no known exploitation of CVE-2022-36414 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cj67-vf86-qmx6.