CVE-2018-17494

CVE-2018-17494 describes a local privilege escalation vulnerability in eVisitorPass, specifically affecting Threshold Security's eVisitorPass software. An attacker with physical access to a kiosk running the software could exploit an error in the Virtual Keyboard Start Menu by pressing the Windows key twice, allowing them to close the application and execute arbitrary processes. This vulnerability is rated as High severity (CVSS 7.8) due to its potential for complete compromise of confidentiality, integrity, and availability, with low attack complexity and user interaction. There is no evidence of active exploitation, nor are there public exploits available in Metasploit, Nuclei, or ExploitDB, though it has received some community discussion and media coverage.