Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Oculus Component: Desktop Clear all filters
TI-2021-06354 CVE-2021-24038 · GHSA-gr73-xmrv-34fc

Improper privilege management in Meta Oculus Desktop

Priority LOW 33

Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2021-08-18 Fixed in 31.1.0.67.507 CWE-269
TI-2020-01812 CVE-2020-1885 · GHSA-jmc3-547v-q3qv

Link following in Meta Oculus Desktop

Priority LOW 34

Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involvin…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00419 Published 2020-04-08 No fix listed CWE-59