https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 23:53:09 +0000 https://cve.radiocsirt.org/vuln/cve-2018-10647 <p>SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its &#34;SaferVPN.Service&#34; service. The &#34;SaferVPN.Service&#34; service executes &#34;openvpn.exe&#34; using OpenVPN config files located within the current user&#39;s %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated attacker may modify these configuration files to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> <p>SaferVPN 4.2.5 for Windows suffers from a SYSTEM privilege escalation vulnerability in its &#34;SaferVPN.Service&#34; service. The &#34;SaferVPN.Service&#34; service executes &#34;openvpn.exe&#34; using OpenVPN config files located within the current user&#39;s %LOCALAPPDATA%\SaferVPN\OvpnConfig directory. An authenticated attacker may modify these configuration files to specify a dynamic library plugin that should run for every new VPN connection attempt. This plugin will execute code in the context of the SYSTEM user.</p> https://cve.radiocsirt.org/vuln/cve-2018-10647