CVE-2018-10204

CVE-2018-10204 describes a SYSTEM privilege escalation vulnerability in PureVPN 6.0.1 for Windows. An authenticated attacker can exploit weak permissions on the OpenVPN configuration file to inject a malicious dynamic library, which the "sevpnclient" service will execute with SYSTEM privileges. This vulnerability carries a high CVSS score of 8.8, indicating a network-exploitable flaw with low attack complexity and high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.