Description
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM.
Advisories 3
- ICSA-26-146-05 ABB Ability Camera Connect CISA ICS & IT advisories · May 26, 2026
- 4HZM000603 ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (VLC) ABB PSIRT · Nov 28, 2025
- WID-SEC-2023-2949 VLC: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 16, 2023