Skip to content
OpenAdvisories

Vendor

SanDisk

17 known vulnerabilities.

Products

ibi 11 ibi web app 2 SanDisk Security Installer for Windows 1 ibi Mobile App 1 PrivateAccess 1 Sandisk Dashboard 1 PrivateAccess Windows App 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.9
    CVE-2024-22167

    SanDisk PrivateAccess DLL Hijacking Vulnerability

    A potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. This vulnerability is only exploitable locally if an attacker has access to a copy of t…

    SanDisk PrivateAccess Windows App Windows
  • High 7.3
    CVE-2023-22818

    Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows

    Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can l…

    SanDisk SanDisk Security Installer for Windows Windows
  • High 7.4
    CVE-2023-22812

    SanDisk PrivateAccess Deprecated TLS protocol versions supported

    SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby compromising confidentiality and integrity of data.

    SanDisk PrivateAccess