Skip to content
OpenAdvisories
Unscored CVE-2021-33436 EUVD-2021-20140GHSA-669x-j2pw-grf8

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vu…

Published Apr 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

NoMachine for Windows prior to version 6.15.1 and 7.5.2 suffer from local privilege escalation due to the lack of safe DLL loading. This vulnerability allows local non-privileged users to perform DLL Hijacking via any writable directory listed under the system path and ultimately execute code as NT AUTHORITY\SYSTEM.

References