Kernel Handle Leak Could Lead to Privilege Escalation for Low-Privileged Users
CVE-2024-28519

7.8HIGH

Key Information:

Vendor

MicroWorld Technologies Inc

Vendor
CVE Published:
3 May 2024
đź”” Create MicroWorld Technologies Inc Vulnerability Alert

What is CVE-2024-28519?

A kernel handle leak vulnerability exists in the ProcObsrvesx.sys component of eScan Antivirus, version 4.0.0.49. This flaw permits low-privileged users to potentially escalate their privileges, leading to unauthorized access and manipulation of system resources. Addressing this issue is crucial for maintaining the integrity and security of affected systems.

References

https://northwave-cybersecurity.com/vulnerability-notice-...
https://www.escanav.com/en/index.asp

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.
CVE-2024-28519 : Kernel Handle Leak Could Lead to Privilege Escalation for Low-Privileged Users