MSI Installer Vulnerability Let Attackers Escalate Privileges with Windows Systems

A critical local privilege escalation vulnerability has been discovered in MSI Center versions 2.0.36.0 and earlier, allowing low-privileged users to escalate their privileges on Windows systems. This security flaw, tracked as CVE-2024-37726, stems from insecure file operations performed by the MSI Center application running with NT AUTHORITY\SYSTEM privileges. "Is Your System Under Attack? Try Cynet […]

The post MSI Installer Vulnerability Let Attackers Escalate Privileges with Windows Systems appeared first on Cyber Security News.

application attackers authority center critical cve cve-2024 cyber security escalation file flaw insecure installer local local privilege escalation low msi operations privilege privileged privilege escalation privileges running security security flaw system system privileges systems vulnerability windows