CVE-2021-24038
HIGHOculus Desktop 1.39-31.1.0.67.507 - Local Privilege Escalation via OVRServiceLauncher Handle Mismanagement
Title source: llmDescription
Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.
References (1)
Core 1
Core References
Third Party Advisory x_refsource_confirm
https://www.facebook.com/security/advisories/cve-2021-24038
Scores
CVSS v3
7.8
EPSS
0.0020
EPSS Percentile
10.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-269
Status
published
Products (1)
oculus/desktop
1.39 - 31.1.0.67.507
Published
Aug 19, 2021
Tracked Since
Feb 18, 2026