CVE-2018-18519

BestXsoftware Best Free Keylogger before 6.0.0 allows local users to gain privileges via a Trojan horse "%PROGRAMFILES%\BFK 5.2.9\syscrb.exe" file because of insecure permissions for the BUILTIN\Users group.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2018-11-19

Last modified

2024-08-05

Weaknesses

CWE-426

Affected products

• Best Free Keylogger (Bestxsoftware)

References

• https://github.com/ilsani/rd/tree/master/security-advisories/bestxsoftware/cve-2018-18519