CVE-2024-36071

—

CVSS 3.1

6.3 medium

EPSS

<1%p4

Published

Jun 20, 2024 (Jun 20, 2024)

Modified

Jun 17, 2026

Description

Samsung Magician 8.0.0 on Windows allows an admin to escalate privileges by tampering with the directory and DLL files used during the installation process. This occurs because of an Untrusted Search Path.

Vendors: samsung
Products: magician
Weakness: CWE-426
Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.