CVE-2024-9493
CVSS 3.1 Score 8.6 of 10 (high)
Details
Published Jan 24, 2025
CWE ID 427
Summary
CVE-2024-9493 is a newly disclosed vulnerability affecting the ToolStick installer. The issue arises due to an uncontrolled search path within the installer, leading to DLL hijacking. An attacker can exploit this vulnerability to gain privilege escalation and execute arbitrary code during the installation process. This can potentially compromise the system and lead to significant security risks. Organizations are advised to update their installers as soon as a patch is available to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.