CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities.

• CWE-1333
• CWE-1333

• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93Exploit, Third Party Advisory
• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93Exploit, Third Party Advisory

Published

Dec 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29479Ribose RNP before 0.16.3 may hang when the input is malforme…5.3
• CVE-2023-2948Cross-site Scripting (XSS) - Generic in GitHub repository op…6.1
• CVE-2023-29480Ribose RNP before 0.16.3 sometimes lets secret keys remain u…7.5
• CVE-2023-29483eventlet before 0.35.2, as used in dnspython before 2.6.0, a…7
• CVE-2023-29484In Terminalfour before 8.3.16, misconfigured LDAP users are …6.5
• CVE-2023-29485An issue was discovered in Heimdal Thor agent versions 3.4.2…9.8
• CVE-2023-29487An issue was discovered in Heimdal Thor agent versions 3.4.2…9.1
• CVE-2023-29489An issue was discovered in cPanel before 11.109.9999.116. XS…6.1
• CVE-2023-2949Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-29491ncurses before 6.4 20230408, when used by a setuid applicati…7.8
• CVE-2023-29492Novi Survey before 8.9.43676 allows remote attackers to exec…9.8
• CVE-2023-29494Improper input validation in BIOS firmware for some Intel(R)…6.7