cve/2024/CVE-2024-42050.md
2025-09-29 21:09:30 +02:00

791 B

CVE-2024-42050

Description

The MSI installer for Splashtop Streamer for Windows before 3.7.0.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate privileges to SYSTEM via an oplock on CredProvider_Inst.reg.

POC

Reference

No PoCs from references.

Github