CVE-2019-19954 Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules.bin\wmic.exe file.
HighCVSS 7.3
EPSS 0.48%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Signal Desktop before 1.29.1 on Windows allows local users to gain privileges by creating a Trojan horse %SYSTEMDRIVE%\node_modules.bin\wmic.exe file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| signal-desktop | < 1.29.1 | 1.29.1 |
References
- blog.mirch.io exploit patch third-party-advisory
- github.com patch