Wacom Driver 6.3.45-1

CPE Details

Wacom Driver 6.3.45-1
6.3.45-1
2023-04-14
10h16 +00:00
2023-04-17
13h16 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:wacom:driver:6.3.45-1:*:*:*:*:*:*:*

Informations

Vendor

wacom

Product

driver

Version

6.3.45-1

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2023-32163 2023-09-06 04h02 +00:00 Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Tablet Service. By creating a symbolic link, an attacker can abuse the service to create a file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-16857.
7.8
High
CVE-2023-32162 2023-09-06 04h02 +00:00 Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Wacom Drivers for Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of the WacomInstallI.txt file by the PrefUtil.exe utility. The issue results from incorrect permissions on the WacomInstallI.txt file. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-16318.
7.8
High
CVE-2022-38604 2023-04-11 00h00 +00:00 Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.
7.3
High
CVE-2022-43293 2023-04-11 00h00 +00:00 Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \Wacom\Wacom_Tablet.exe.
5.9
Medium