Description
Windscribe 1.81 creates a named pipe with a NULL DACL that allows Everyone users to gain privileges or cause a denial of service via \\.\pipe\WindscribeService.
References (2)
Core 2
Core References
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/143840
Third Party Advisory x_refsource_misc
https://gist.github.com/drmint80/e5f8a3b8b8324c50a85d9b8623197c68
Scores
CVSS v3
7.8
EPSS
0.0004
EPSS Percentile
13.4%
Attack Vector
LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-732
Status
published
Products (1)
windscribe/windscribe
1.81
Published
May 23, 2018
Tracked Since
Feb 18, 2026