CVE-2018-5349

CVE-2018-5349 is a privilege escalation vulnerability affecting Heimdal PRO v2.2.190 and likely other Heimdal products, stemming from faulty directory permissions allowing unprivileged users to write to a critical directory. This enables a local attacker to place a malicious DLL, which the Heimdal.MonitorServices.exe process (running as SYSTEM) will load on startup. Rated 7.8 HIGH (CVSSv3), the vulnerability has a low attack complexity and requires local user privileges, but can lead to full compromise (confidentiality, integrity, availability). There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.