CVE-2020-11081

HIGH Year: 2020
CVSS v3 Score
8.2
High
CVSS v2 Score
4.4
Medium
Weakness Type
CWE-114
View all →

Vulnerability Description

osquery before version 4.4.0 enables a privilege escalation vulnerability. If a Window system is configured with a PATH that contains a user-writable directory then a local user may write a zlib1.dll DLL, which osquery will attempt to load. Since osquery runs with elevated privileges this enables local escalation. This is fixed in version 4.4.0.

Related Vulnerabilities

CVE-2024-32004

HIGH
CVSS:8.1(High)

Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, an attacker can prepare a local repository in such a way that, when cloned, will execute...

CWE-1142024

CVE-2025-0160

HIGH
CVSS:8.1(High)

IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3....

CWE-1142025

CVE-2024-25021

HIGH
CVSS:8.4(High)

IBM AIX 7.3, VIOS 4.1's Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary commands. IBM X-Force ID: 281320.

CWE-1142024

CVE-2019-8461

HIGH
CVSS:7.8(High)

Check Point Endpoint Security Initial Client for Windows before version E81.30 tries to load a DLL placed in any PATH location on a clean image without Endpoint Client installed. An attacker can lever...

CWE-1142019

CVE-2020-6024

HIGH
CVSS:7.8(High)

Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable to a possible local privilege escalation d...

CWE-1142020

CVE-2020-8107

HIGH
CVSS:7.8(High)

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bit...

CWE-1142020