VULNERABILITY INTELLIGENCE

CVE-2022-24618

CVSS score7.8 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2022-03-10
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer.

Weakness classification

  • nvd@nist.gov: CWE-281

Primary references