← Database

CVE-2022-32450

HIGH CVSS: 7.1 Published: 2022-07-18 Modified: 2026-07-09

Description

AnyDesk 7.0.9 allows a local user to gain SYSTEM privileges via a symbolic link because the user can write to their own %APPDATA% folder (used for ad.trace and chat) but the product runs as SYSTEM when writing chat-room data there.

Affected Platforms

Anydesk Anydesk

Weakness Type

CWE-59

References