Local Privilege Escalation Vulnerability in Wacom Center
CVE-2024-9766

7.8HIGH

Key Information:

Vendor

Wacom

Status
Center
Vendor
CVE Published:
22 November 2024

What is CVE-2024-9766?

A local privilege escalation vulnerability exists in the WTabletServicePro process of Wacom Center. This flaw enables attackers with low-privileged code execution on the target system to leverage symbolic links to manipulate the service into creating files. By exploiting this vulnerability, an attacker can escalate their privileges, allowing for arbitrary code execution with SYSTEM-level access. This presents a significant risk to users of affected Wacom Center installations, as it could lead to unauthorized actions and exposure of sensitive data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://www.zerodayinitiative.com/advisories/ZDI-24-1336/

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.