Drivepool
Monthly
Local privilege escalation in StableBit DrivePool 2.3.13.1687 allows a low-privileged local user to achieve high-impact compromise of confidentiality, integrity, and availability on the affected system. The vulnerability resides in DrivePool.Service.exe and stems from CWE-275 permission issues, with the publicly available exploit reference explicitly identifying insecure deserialization as the attack mechanism enabling escalation. No active exploitation has been confirmed by CISA KEV, but a public proof-of-concept exists and the CVSS 4.0 vector includes E:P (exploit proof-of-concept), elevating real-world risk above theoretical.
Local privilege escalation in StableBit DrivePool 2.3.13.1687 allows a low-privileged local user to achieve high-impact compromise of confidentiality, integrity, and availability on the affected system. The vulnerability resides in DrivePool.Service.exe and stems from CWE-275 permission issues, with the publicly available exploit reference explicitly identifying insecure deserialization as the attack mechanism enabling escalation. No active exploitation has been confirmed by CISA KEV, but a public proof-of-concept exists and the CVSS 4.0 vector includes E:P (exploit proof-of-concept), elevating real-world risk above theoretical.