Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges.
CVSS Score
9.8
EPSS Score
0.006
Published
2017-04-21