CVE-2024-9766

Summary

CVE-2024-9766 is a newly disclosed local privilege escalation vulnerability affecting Wacom Center's WTabletServicePro. This issue enables attackers to escalate privileges by creating a symbolic link within the service, providing them with the ability to execute arbitrary code with SYSTEM-level access. To exploit this vulnerability, an attacker must initially gain the capability to execute low-privileged code on the target system. This vulnerability, identified as ZDI-CAN-24304, poses a significant risk to affected installations of Wacom Center.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.