CVE-2023-22818

Summary

CVE-2023-22818 refers to multiple DLL search order hijack vulnerabilities identified in the SanDisk Security Installer for Windows. An attacker with local access can exploit these vulnerabilities by placing a malicious DLL in the same folder as the installer. By doing so, the attacker could execute arbitrary code with the privileges of the vulnerable application or gain a level of persistence on the compromised host. This could result in significant security risks to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.