VULNERABILITY INTELLIGENCE

CVE-2024-9494

CVSS score8.6 HIGH

EPSS probability0.19%

CISA KEVNot currently listed

Published2025-01-24

Last modified2026-06-17

Description

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the CP210 VCP Win 2k installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.