CVE-2024-7253

Summary

CVE-2024-7253 is a local privilege escalation vulnerability affecting NoMachine's nxnode.exe. An attacker must initially gain the ability to execute low-privileged code on the target system. The flaw arises from the software's failure to securely load a library, allowing an attacker to manipulate the search path and escalate privileges. This vulnerability can ultimately lead to arbitrary code execution with SYSTEM privileges. (ZDI-CAN-24039)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.