CVE-2024-7886

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 16, 2024
Updated: Aug 19, 2024
CWE ID 427

Summary

CVE-2024-7886 is a newly discovered critical vulnerability in Scooter Software Beyond Compare versions up to 3.3.5.15075. The issue lies within the library 7zxa.dll, and it permits an uncontrolled search path manipulation. For an attack to be successful, the system must be locally breached. However, the authenticity of this vulnerability is yet to be confirmed by the vendor, who states that an initial system compromise is necessary before attempting to exploit it.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Beyond Compare

Affected Vendors

  • Scooter Software