What is CVE-2024-29863?

CVE-2024-29863 is a high-severity vulnerability in N/a, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.8/10. Published 2024-04-05.

How severe is CVE-2024-29863?

High severity. CVSS v3 base score is 7.8 out of 10.

Is CVE-2024-29863 known to be exploited?

3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2024-29863

A race condition in the installer executable in Qlik Qlikview before versions May 2022 SR3 (12.70.20300) and May 2023 SR2 (12,80.20200) may allow an existing lower privileged user to cause code to be executed in the context of a Windows Administrator.

Vulnerability class: Race Condition

EPSS: 0.004 (36.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-362 — Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition)

Public proof-of-concept exploits

References

cve@mitre.org

Frequently asked questions

What is CVE-2024-29863?: CVE-2024-29863 is a high-severity vulnerability in N/a, classified under Concurrent Execution using Shared Resource with Improper Synchronization (Race Condition). CVSS score: 7.8/10. Published 2024-04-05.
How severe is CVE-2024-29863?: High severity. CVSS v3 base score is 7.8 out of 10.
Is CVE-2024-29863 known to be exploited?: 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.