CVE-2024-9490

Summary

CVE-2024-9490 is a newly disclosed vulnerability affecting the installer of Silicon Labs (8-bit) IDE. The issue stems from an uncontrolled search path, which exposes DLL hijacking risks. Malicious actors can exploit this vulnerability to gain privilege escalation and execute arbitrary code during the installer process. This can potentially compromise the affected system if the installer is launched from an untrusted source. Organizations are urged to update their installers as soon as possible to mitigate the risks associated with CVE-2024-9490.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.