Arksigner Desktop Client
Monthly
Local privilege escalation in ArkSigner Desktop Client versions 2.2.16.10 through 17062026 allows authenticated attackers to execute arbitrary code via search order hijacking. A low-privileged local user who can place a malicious DLL in a directory that the application searches before the legitimate one, or convince a victim to open a file from such a location, can achieve full system compromise. No public exploit or active exploitation has been reported, but the TR-CERT advisory confirms the vulnerability.
Local privilege escalation in ArkSigner Desktop Client versions 2.2.16.10 through 17062026 allows authenticated attackers to execute arbitrary code via search order hijacking. A low-privileged local user who can place a malicious DLL in a directory that the application searches before the legitimate one, or convince a victim to open a file from such a location, can achieve full system compromise. No public exploit or active exploitation has been reported, but the TR-CERT advisory confirms the vulnerability.