https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 20:19:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258699 EUVD-2026-258699 https://cve.radiocsirt.org/vuln/euvd-2026-258699 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50591 <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicating with the Elefant Update Service which is running as &#34;SYSTEM&#34; via Windows Named Pipes.The Elefant Software Updater (ESU) consists of two components. An ESU service which runs as &#34;NT AUTHORITY\SYSTEM&#34; and an ESU tray client which communicates with the service to update or repair the installation and is running with user permissions. The communication is implemented using named pipes. A crafted message of type &#34;MessageType.SupportServiceInfos&#34; can be sent to the local ESU service to inject commands, which are then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicating with the Elefant Update Service which is running as &#34;SYSTEM&#34; via Windows Named Pipes.The Elefant Software Updater (ESU) consists of two components. An ESU service which runs as &#34;NT AUTHORITY\SYSTEM&#34; and an ESU tray client which communicates with the service to update or repair the installation and is running with user permissions. The communication is implemented using named pipes. A crafted message of type &#34;MessageType.SupportServiceInfos&#34; can be sent to the local ESU service to inject commands, which are then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-50591 https://cve.radiocsirt.org/vuln/ghsa-hggh-f6m4-4c3w <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicating with the Elefant Update Service which is running as &#34;SYSTEM&#34; via Windows Named Pipes.The Elefant Software Updater (ESU) consists of two components. An ESU service which runs as &#34;NT AUTHORITY\SYSTEM&#34; and an ESU tray client which communicates with the service to update or repair the installation and is running with user permissions. The communication is implemented using named pipes. A crafted message of type &#34;MessageType.SupportServiceInfos&#34; can be sent to the local ESU service to inject commands, which are then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicating with the Elefant Update Service which is running as &#34;SYSTEM&#34; via Windows Named Pipes.The Elefant Software Updater (ESU) consists of two components. An ESU service which runs as &#34;NT AUTHORITY\SYSTEM&#34; and an ESU tray client which communicates with the service to update or repair the installation and is running with user permissions. The communication is implemented using named pipes. A crafted message of type &#34;MessageType.SupportServiceInfos&#34; can be sent to the local ESU service to inject commands, which are then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> https://cve.radiocsirt.org/vuln/ghsa-hggh-f6m4-4c3w