7.8
High
CVE-2024-7995 A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to…
Description
A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the VRED Design application. Exploitation of this vulnerability may lead to code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| VRED Design 2025 | 2025 → < 2025.2 | 2025.2 |
| vred | 2025 | No fix stated |