Windows Remote Help
Monthly
Windows Remote Help versions 5.0.0.0 through below 5.2.1040.0 is vulnerable to an uncontrolled search path element (CWE-427), enabling a locally authenticated attacker to conduct spoofing attacks with high confidentiality and integrity impact. The flaw stems from the application resolving executables or libraries from attacker-controllable directory paths, a class of vulnerability commonly manifesting as DLL or binary planting on Windows. No public exploit has been identified at time of analysis, and Microsoft has released a patch as of the advisory publication.
Windows Remote Help versions 5.0.0.0 through below 5.2.1040.0 exposes an uncontrolled search path element (CWE-427) that enables an authorized local attacker with standard user privileges to deny service against the Remote Help application. The flaw stems from the application resolving executable dependencies or resources through a controllable or insufficiently constrained search path, allowing a low-privilege local user to interfere with path resolution and crash the process. No public exploit code or active exploitation has been identified at time of analysis; Microsoft has released a remediation in version 5.2.1040.0.
Local privilege escalation in Microsoft Windows Remote Help allows an authenticated low-privileged user to elevate to higher privileges via improper access control (authorization bypass) in the Remote Help component. Exploitation requires prior local access with limited privileges (PR:L) but no user interaction, yielding full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, though Microsoft has released a patch.
Windows Remote Help versions 5.0.0.0 through below 5.2.1040.0 is vulnerable to an uncontrolled search path element (CWE-427), enabling a locally authenticated attacker to conduct spoofing attacks with high confidentiality and integrity impact. The flaw stems from the application resolving executables or libraries from attacker-controllable directory paths, a class of vulnerability commonly manifesting as DLL or binary planting on Windows. No public exploit has been identified at time of analysis, and Microsoft has released a patch as of the advisory publication.
Windows Remote Help versions 5.0.0.0 through below 5.2.1040.0 exposes an uncontrolled search path element (CWE-427) that enables an authorized local attacker with standard user privileges to deny service against the Remote Help application. The flaw stems from the application resolving executable dependencies or resources through a controllable or insufficiently constrained search path, allowing a low-privilege local user to interfere with path resolution and crash the process. No public exploit code or active exploitation has been identified at time of analysis; Microsoft has released a remediation in version 5.2.1040.0.
Local privilege escalation in Microsoft Windows Remote Help allows an authenticated low-privileged user to elevate to higher privileges via improper access control (authorization bypass) in the Remote Help component. Exploitation requires prior local access with limited privileges (PR:L) but no user interaction, yielding full confidentiality, integrity, and availability impact. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV, though Microsoft has released a patch.