Description
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hyland | Desktop Host | < 25.1.1 | 25.1.1 |