What is CVE-2022-24618?

CVE-2022-24618 is a high-severity vulnerability in Heimdalsecurity Heimdal Premium Security, classified under Improper Preservation of Permissions. CVSS score: 7.8/10. Published 2022-03-10.

How severe is CVE-2022-24618?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Heimdalsecurity Heimdal Premium Security

CVE-2022-24618

Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer.

EPSS: 0.002 (15.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Heimdalsecurity Heimdal_premium_security
N/a — versions n/a

Weakness classification (CWE)

CWE-281 — Improper Preservation of Permissions

References

af854a3a-2127-422b-91ae-364da2661108 (x_refsource_MISC, Not Applicable)
cve@mitre.org (x_refsource_MISC, Release Notes, Vendor Advisory)

Frequently asked questions

What is CVE-2022-24618?: CVE-2022-24618 is a high-severity vulnerability in Heimdalsecurity Heimdal Premium Security, classified under Improper Preservation of Permissions. CVSS score: 7.8/10. Published 2022-03-10.
How severe is CVE-2022-24618?: High severity. CVSS v3 base score is 7.8 out of 10.