Untrusted Search Path Vulnerability in Visual C++ Redistributable by Microsoft

CVE-2018-0599

What is CVE-2018-0599?

A vulnerability exists in the installer of the Visual C++ Redistributable that allows an attacker to exploit the untrusted search path. This can lead to privilege escalation if a malicious DLL is placed in a directory that the installer searches. When executed, the attacker gains elevated privileges, leading to potential system compromise. Organizations should ensure they are using the latest versions of the Visual C++ Redistributable and follow best practices for software installations to mitigate this risk.

References