What is CVE-2024-11872?

CVE-2024-11872 is a high-severity vulnerability in Epic Games Launcher, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2024-12-12.

How severe is CVE-2024-11872?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Epic Games Launcher

CVE-2024-11872

Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain th…

EPSS: 0.002 (8.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Epic Games Launcher — versions 16.6.0-33806133
Epicgames Launcher — versions 16.6.0-33806133

Weakness classification (CWE)

CWE-276 — Incorrect Default Permissions

References

zdi-disclosures@trendmicro.com (x_research-advisory, Third Party Advisory)
zdi-disclosures@trendmicro.com (vendor-advisory, Release Notes)

Frequently asked questions

What is CVE-2024-11872?: CVE-2024-11872 is a high-severity vulnerability in Epic Games Launcher, classified under Incorrect Default Permissions. CVSS score: 7.8/10. Published 2024-12-12.
How severe is CVE-2024-11872?: High severity. CVSS v3 base score is 7.8 out of 10.