Untrusted Search Path Vulnerability in Content Transfer for Windows by Sony

CVE-2022-41796

What is CVE-2022-41796?

An untrusted search path vulnerability exists in the installer of Content Transfer for Windows versions 1.3 and earlier, enabling attackers to exploit the system through a Trojan horse DLL stored in an unspecified directory. This can allow unauthorized privilege escalation, putting systems at risk. Users are encouraged to review their software configurations and update to the latest version to mitigate potential threats.

References