PT-2021-11399
CVE-2020-27518
·
Published
2021-05-04
·
Updated
2021-05-11
Description by
CVSS 3.1
7.8
HighMetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Windscribe VPN for Mac and Windows versions <= 2.02.10
Description:
The issue concerns a local privilege escalation vulnerability in the WindscribeService component. This vulnerability allows a low-privilege user to potentially execute code as root or SYSTEM by leveraging certain openvpn options.
Recommendations:
For versions <= 2.02.10, update to a version higher than 2.02.10 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾