Unscored CVE-2023-50446 EUVD-2023-55238GHSA-4j2v-8g53-r728

An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivilege…

Published Dec 10, 2023 · Updated Aug 2, 2024 · Assigned by mitre

Description

An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM.

References

https://github.com/mullvad/mullvadvpn-app/pull/5398
https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6-beta1
https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6