https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 05:53:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258700 EUVD-2026-258700 https://cve.radiocsirt.org/vuln/euvd-2026-258700 https://cve.radiocsirt.org/vuln/fkie_cve-2024-50592 <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a list of files and their hashes. In addition, instructions to execute binaries to finalize the repair process are included. The executables are executed as &#34;NT AUTHORITY\SYSTEM&#34; after they are copied over to the user writable installation folder (C:\Elefant1). This means that a user can overwrite either &#34;PostESUUpdate.exe&#34; or &#34;Update_OpenJava.exe&#34; in the time frame after the copy and before the execution of the final repair step. The overwritten executable is then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a list of files and their hashes. In addition, instructions to execute binaries to finalize the repair process are included. The executables are executed as &#34;NT AUTHORITY\SYSTEM&#34; after they are copied over to the user writable installation folder (C:\Elefant1). This means that a user can overwrite either &#34;PostESUUpdate.exe&#34; or &#34;Update_OpenJava.exe&#34; in the time frame after the copy and before the execution of the final repair step. The overwritten executable is then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-50592 https://cve.radiocsirt.org/vuln/ghsa-fh7h-qp2r-qp8p <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a list of files and their hashes. In addition, instructions to execute binaries to finalize the repair process are included. The executables are executed as &#34;NT AUTHORITY\SYSTEM&#34; after they are copied over to the user writable installation folder (C:\Elefant1). This means that a user can overwrite either &#34;PostESUUpdate.exe&#34; or &#34;Update_OpenJava.exe&#34; in the time frame after the copy and before the execution of the final repair step. The overwritten executable is then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> <p>An attacker with local access the to medical office computer can escalate his Windows user privileges to &#34;NT AUTHORITY\SYSTEM&#34; by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the service queries the server for a list of files and their hashes. In addition, instructions to execute binaries to finalize the repair process are included. The executables are executed as &#34;NT AUTHORITY\SYSTEM&#34; after they are copied over to the user writable installation folder (C:\Elefant1). This means that a user can overwrite either &#34;PostESUUpdate.exe&#34; or &#34;Update_OpenJava.exe&#34; in the time frame after the copy and before the execution of the final repair step. The overwritten executable is then executed as &#34;NT AUTHORITY\SYSTEM&#34;.</p> https://cve.radiocsirt.org/vuln/ghsa-fh7h-qp2r-qp8p