ZDI-CAN-25689 HIGH 7.8 Overdue Nov 01, 2024

Wacom

Wacom, a leading manufacturer of digital pen tablets and input devices, has a high-severity local privilege escalation vulnerability (CVSS 7.8) that requires local access and low-level user privileges to exploit, but once leveraged grants attackers complete control over system confidentiality, integrity, and availability. The vulnerability was discovered by Trend Micro researcher Amol Dosanjh and has until March 1, 2025 for a patch. Security teams should monitor for suspicious privilege escalation attempts targeting Wacom software on endpoints and ensure users and devices are updated once patches become available.

Advisory Details
Researcher Discovered by: Amol Dosanjh of Trend Micro
Reported November 01, 2024
Deadline March 01, 2025 411d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy