Achọpụtara adịghị ike a kpọrọ Pátá na Caphyon Advanced Installer 19.7. A na-emetụta ọrụ a na-amaghị nke akụkụ WinSxS DLL Handler. Nchegharị na-ebute Mmepe ikike pụrụ iche. Nsogbu a e kwuru site na CWE dị ka CWE-427. Adịghị ike e bipụtara na 11/06/2022 dị ka Advaned Installer Local Privilege Escalation Vulnerability. A na-ekekọrịta ndụmọdụ a maka nbudata na heegong.github.io. A na-ere vulnerability a dị ka CVE-2022-4956. Mwakpo ahụ kwesịrị ịmalite site n'ebe ahụ. Nkọwa teknụzụ adịghị. Ọzọkwa, exploit dị. A kpọrọ exploit ahụ n'ìhè ọha na eze ma nwee ike iji ya. Ugbu a, ọnụahịa dị ugbu a maka exploit might be approx. USD $0-$5k n'oge a. A na-akọwa usoro mwakpo dị ka T1574 site n'aka oru MITRE ATT&CK. E kwupụtara ya dị ka Ẹ̀rí Èrò. Enwere exploit a maka nbudata na heegong.github.io. N’oge ọ bụ 0-day, a chere na ọnụahịa ya n’ahịa ndò dị ihe dị ka $0-$5k. Imeziwanye na nsụgharị 19.7.1 nwere ike idozi nsogbu a. Ụdị ọhụrụ dị njikere maka ibudata na advancedinstaller.com. A na-akwado ka e melite akụkụ a metụtara. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

3 Mgbanwe · 73 Ìpinnu Àkọsílẹ̀