Equitriton
Monthly
Privilege escalation in EquiTriton before commit f5ddbb5 arises from an uncontrolled search path element (CWE-427) within Ring 3 user-mode application components, allowing a local attacker operating under a high-privilege user context to substitute a malicious binary or library in a search path directory that EquiTriton resolves ahead of its legitimate target. Successful exploitation yields full confidentiality, integrity, and availability compromise of the vulnerable system while leaving downstream systems unaffected. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis; Intel disclosed the issue under advisory INTEL-SA-01473.
Privilege escalation in EquiTriton before commit f5ddbb5 arises from an uncontrolled search path element (CWE-427) within Ring 3 user-mode application components, allowing a local attacker operating under a high-privilege user context to substitute a malicious binary or library in a search path directory that EquiTriton resolves ahead of its legitimate target. Successful exploitation yields full confidentiality, integrity, and availability compromise of the vulnerable system while leaving downstream systems unaffected. No public exploit code has been identified and this CVE does not appear in the CISA KEV catalog at time of analysis; Intel disclosed the issue under advisory INTEL-SA-01473.