CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Upgrading to version 19.7.1 is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-240903.

• CWE-427

• https://heegong.github.io/posts/Advaned-Installer-Local-Privilege-Escalation-Vulnerability/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.240903Permissions Required
• https://vuldb.com/?id.240903Third Party Advisory
• https://www.advancedinstaller.com/release-19.7.1.html#bugfixesRelease Notes
• https://heegong.github.io/posts/Advaned-Installer-Local-Privilege-Escalation-Vulnerability/Exploit, Third Party Advisory
• https://vuldb.com/?ctiid.240903Permissions Required
• https://vuldb.com/?id.240903Third Party Advisory
• https://www.advancedinstaller.com/release-19.7.1.html#bugfixesRelease Notes

Published

Sep 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-49554In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2022-49555In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49556In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2022-49557In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49558In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49559In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49560In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2022-49561In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49562In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49563In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49564In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2022-49565In the Linux kernel, the following vulnerability has been re…5.5