CVE-2022-4956: Caphyon Advanced Installer WinSxS DLL uncontrolled search path
A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 19.7.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-240903.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4956?
The severity of CVE-2022-4956 is high, with a severity value of 7.8.
What is the affected software version of CVE-2022-4956?
CVE-2022-4956 affects Caphyon Advanced Installer version 19.7.
What is the CWE of CVE-2022-4956?
The CWE of CVE-2022-4956 is 427.
Is CVE-2022-4956 a local privilege escalation vulnerability?
Yes, CVE-2022-4956 is a local privilege escalation vulnerability.
Where can I find more information about CVE-2022-4956?
You can find more information about CVE-2022-4956 at the following references: [Reference 1](https://heegong.github.io/posts/Advaned-Installer-Local-Privilege-Escalation-Vulnerability/), [Reference 2](https://vuldb.com/?ctiid.240903), [Reference 3](https://vuldb.com/?id.240903).