CVE-2024-27674

n/a / n/a PUBLISHED

Description (CNA)

Macro Expert through 4.9.4 allows BUILTIN\Users:(OI)(CI)(M) access to the "%PROGRAMFILES(X86)%\GrassSoft\Macro Expert" folder and thus an unprivileged user can escalate to SYSTEM by replacing the MacroService.exe binary.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://www.macro-expert.com/
https://github.com/Alaatk/CVE-2024-27674/tree/main

ADP enrichment

CVE

No English description supplied.

https://www.macro-expert.com/
https://github.com/Alaatk/CVE-2024-27674/tree/main

CISA-ADP

No English description supplied.

No references supplied.