CVE-2026-11958
2026-06-18
14h17 +00:00
14h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
Local privilege escalation by loading DLLs from a shared temporary directory in ANSSI’s DFIR-ORC, versions 10.2.7 and prior. An attacker with prior access to the system, can place a malicious DLL in C:\Windows\Temp and wait for the application to be executed. Because DFIR-ORC is extracted and executed from that location with administrative privileges, the malicious library can be loaded automatically, allowing the attacker to gain administrator privileges on the affected machine.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Uncontrolled Search Path Element The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors. |
