Dell Grab Vulnerability: Local Attacker Could Escalate Privileges and Access Sensitive Data

CVE-2024-25958

What is CVE-2024-25958?

Dell Grab for Windows, prior to version 5.0.4, is susceptible to a weakness in its application folder permissions which could allow a local authenticated attacker to exploit the vulnerability. Successful exploitation could enable the attacker to escalate privileges, gain unauthorized access to sensitive application data, modify application data without permission, and potentially disrupt service functionality. This vulnerability underscores the importance of robust access controls and application security practices.

References