CVE-2018-12441

CVE-2018-12441 is a local privilege escalation vulnerability affecting Corsair Utility Engine (CUE) due to insecure default permissions on the CorsairService. Unprivileged local users can modify the service's binary path, allowing arbitrary command execution and complete system control. With a CVSS score of 7.8 (High), this vulnerability requires local access but is easily exploitable with low attack complexity, leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, indicating a low current threat landscape despite its severity.