Vulnerabilities > Heimdalsecurity > High

DATE CVE VULNERABILITY TITLE RISK
2022-03-10 CVE-2022-24618 Improper Preservation of Permissions vulnerability in Heimdalsecurity Heimdal Premium Security 2.5.383/2.5.385/2.5.395
Heimdal.Wizard.exe installer in Heimdal Premium Security 2.5.395 and earlier has insecure permissions, which allows unprivileged local users to elevate privileges to SYSTEM via the "Browse For Folder" window accessible by triggering a "Repair" on the MSI package located in C:\Windows\Installer.
local
low complexity
heimdalsecurity CWE-281
7.8
2018-03-22 CVE-2018-5731 Improper Input Validation vulnerability in Heimdalsecurity Heimdal 2.2.190
An issue was discovered in Heimdal PRO 2.2.190.
local
high complexity
heimdalsecurity CWE-20
7.0
2018-03-22 CVE-2018-5349 Incorrect Permission Assignment for Critical Resource vulnerability in Heimdalsecurity Heimdal 2.2.190
A vulnerability has been found in Heimdal PRO v2.2.190, but it is most likely also present in Heimdal FREE and Heimdal CORP.
local
low complexity
heimdalsecurity CWE-732
7.8