CVE-2023-41929
HIGHSamsung Memory Card & Ufd Authentication - Uncontrolled Search Path
Title source: ruleDescription
A DLL hijacking vulnerability in Samsung Memory Card & UFD Authentication Utility PC Software before 1.0.1 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows to exploit this vulnerability.)
Scores
CVSS v3
7.3
EPSS
0.0003
EPSS Percentile
7.4%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Classification
CWE
CWE-427
Status
published
Affected Products (1)
samsung/memory_card_\&_ufd_authentication
< 1.0.1
Timeline
Published
Sep 18, 2023
Tracked Since
Feb 18, 2026