I2P before 0.9.46 allows local users to gain privileges via a Trojan horse I2PSvc.exe file because of weak permissions on a certain %PROGRAMFILES% subdirectory.
CVSS Score
7.8
EPSS Score
0.0
Published
2020-06-16