Approved changes feed: RSS · Atom

cpe:2.3:a:sandisk:sandisk_security_installer_for_windows:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSandisk (23fbabfc-e39d-5816-af6c-e1d638fa70f9)
ProductSandisk Security Installer For Windows (87866eb1-440a-5564-b4dd-0d3c4896c998)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-22818 vulnerable 2026-06-08 05:54:27.158183 Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows
HIGH (7.3)
Multiple DLL Search Order Hijack vulnerabilities were addressed in the SanDisk Security Installer for Windows that could allow attackers with local access to execute arbitrary code by executing the installer in the same folder as the malicious DLL. This can lead to the execution of arbitrary code with the privileges of the vulnerable application or obtain a certain level of persistence on the compromised host. 
Published: 2023-11-15T20:03:57.085Z
Updated: 2024-08-29T17:35:18.339Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.