← Back to feed
advisories Zero Day Initiative

ZDI-26-281: Microsoft vcpkg OpenSSL Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Zero Day Initiative Microsoft

This vulnerability allows local attackers to escalate privileges on applications built using the Microsoft vcpkg port of OpenSSL. An attacker must first obta...

T1548 T1068 1 IOC
Read the full story Zero Day Initiative →

Related Coverage

advisories CISA Adds One Known Exploited Vulnerability to Catalog CISA Advisories · Aug 24 advisories DOUBLECUP's PNG Payload, (Mon, Aug 24th) SANS ISC · Aug 24 advisories ZDI-26-588: Fabric.js loadFromJSON Server-Side Request Forgery Vulnerability Zero Day Initiative · Aug 24