CVE-2024-27233

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In ppcfw_init_secpolicy of ppcfw.c, there is a possible permission bypass due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Mar 11, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-272345.9In fvp_set_target of fvp.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information discl CVE-2024-272355.5In plugin_extern_func of , there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclo CVE-2024-272368.4In aoc_unlocked_ioctl of aoc.c, there is a possible memory corruption due to type confusion. This could lead to local escalation of privileg CVE-2024-272375.5In wipe_ns_memory of nsmemwipe.c, there is a possible incorrect size calculation due to a logic error in the code. This could lead to local CVE-2024-272386.3Race condition in the installer for some Zoom Apps and SDKs for Windows before version 6.0.0 may allow an authenticated user to conduct a pr CVE-2024-272396.5Use after free in some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.CVE-2024-27247.5SQL injection vulnerability in the CIGESv2 system, through /ajaxServiciosAtencion.php, in the 'idServicio' parameter. The exploitation of th CVE-2024-272407.8Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation CVE-2024-272417.5Improper input validation in some Zoom Apps and SDKs may allow an authenticated user to conduct a denial of service via network access.CVE-2024-272426.8Cross site scripting in Zoom Desktop Client for Linux before version 5.17.10 may allow an authenticated user to conduct a denial of service CVE-2024-272436.5Buffer overflow in some Zoom Workplace Apps and SDK’s may allow an authenticated user to conduct a denial of service via network access.CVE-2024-272447.8Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to c