CVE-2018-11479

CVE-2018-11479 describes a privilege escalation vulnerability in Windscribe VPN client version 1.81. The WindscribeService.exe process, running with SYSTEM privileges, creates a named pipe that allows the Windscribe VPN process to execute other processes. Due to a lack of validation on the program name before executing it, an authenticated local attacker can leverage this pipe to execute arbitrary malicious processes with SYSTEM privileges. This vulnerability carries a CVSS score of 7.8 (High) due to its low attack complexity and high impact on confidentiality, integrity, and availability. While not on the CISA KEV catalog, a Metasploit module exists for exploitation, and its EPSS score indicates a higher than average likelihood of exploitation.