CVE-2024-22002

CORSAIR iCUE 5.9.105 with iCUE Murals on Windows allows unprivileged users to insert DLL files in the cuepkg-1.2.6 subdirectory of the installation directory.

Score

CVSS 3.1 7.8 High

Status

Deferred - cve@mitre.org

Published

2024-06-18

Last modified

2024-08-01

Weaknesses

CWE-200

Affected products

• Icue (Corsair)

References

• https://github.com/0xkickit/iCUE_DllHijack_LPE-CVE-2024-22002
• https://twitter.com/0xkickit