CVE-2024-7886
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Aug 16, 2024
Updated: Aug 19, 2024
CWE ID 427
Summary
CVE-2024-7886 is a newly discovered critical vulnerability in Scooter Software Beyond Compare versions up to 3.3.5.15075. The issue lies within the library 7zxa.dll, and it permits an uncontrolled search path manipulation. For an attack to be successful, the system must be locally breached. However, the authenticity of this vulnerability is yet to be confirmed by the vendor, who states that an initial system compromise is necessary before attempting to exploit it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Beyond Compare
Affected Vendors
- Scooter Software