CVE-2024-9497

by Fred · 24/01/2025

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress 4 SDK

installer can lead to privilege escalation and arbitrary code execution when running the impacted installer.