CVE-2018-9344

Summary

CVE-2018-9344 is a vulnerability affecting several functions in DescramblerImpl.cpp. The issue arises due to improper locking, resulting in a possible use-after-free condition. This vulnerability allows for local privilege escalation, granting higher access levels to an attacker without requiring additional execution privileges. Notably, user interaction is not necessary for exploitation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.