CVE-2024-11872: Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability
Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Epic Games Launcher. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the product installer. The product applies incorrect default permissions to a sensitive folder. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-24329.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-11872?
CVE-2024-11872 has a medium severity rating due to its potential for local privilege escalation.
How do I fix CVE-2024-11872?
To fix CVE-2024-11872, update the Epic Games Launcher to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-11872?
CVE-2024-11872 affects users of the Epic Games Launcher who have not updated to the patched version.
What type of vulnerability is CVE-2024-11872?
CVE-2024-11872 is a local privilege escalation vulnerability that allows attackers to gain higher access levels.
Can CVE-2024-11872 be exploited remotely?
No, CVE-2024-11872 requires local access to the system for exploitation.