Vulnerabilities > Hypr > Workforce Access > High

DATE CVE VULNERABILITY TITLE RISK
2024-01-16 CVE-2023-6334 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hypr Workforce Access
Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.
local
low complexity
hypr CWE-119
7.8
2024-01-16 CVE-2023-6335 Link Following vulnerability in Hypr Workforce Access
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
local
low complexity
hypr CWE-59
7.8
2024-01-16 CVE-2023-6336 Link Following vulnerability in Hypr Workforce Access
Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7.
local
low complexity
hypr CWE-59
7.8
2022-11-03 CVE-2022-3258 Incorrect Permission Assignment for Critical Resource vulnerability in Hypr Workforce Access
Incorrect Permission Assignment for Critical Resource vulnerability in HYPR Workforce Access on Windows allows Authentication Abuse.
low complexity
hypr CWE-732
8.8
2022-07-19 CVE-2022-1984 Deserialization of Untrusted Data vulnerability in Hypr Workforce Access
This issue affects: HYPR Windows WFA versions prior to 7.2; Unsafe Deserialization vulnerability in HYPR Workforce Access (WFA) before version 7.2 may allow local authenticated attackers to elevate privileges via a malicious serialized payload.
local
low complexity
hypr CWE-502
7.8