CVE-2018-17496

CVE-2018-17496 describes a privilege escalation vulnerability in Threshold Security's eVisitorPass, specifically when operating in kiosk mode. A local attacker can bypass the kiosk's restrictions by using Ctrl+Shift+Esc to access Task Manager, enabling them to terminate processes or launch new ones. This vulnerability carries a high CVSS score of 7.8, indicating a significant impact with high confidentiality, integrity, and availability compromise, requiring only low privileges and local access with low attack complexity. Despite its severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB, though it has garnered some community discussion and media coverage.