CVE-2018-7484

CVE-2018-7484 describes a privilege escalation vulnerability in PureVPN through version 5.19.4.0 on Windows. The PureVPN client installation grants "Everyone" Full Control permissions to its directory, and the PureVPNService.exe, running as SYSTEM, attempts to load DLLs using relative paths. This allows an attacker to place malicious DLLs in the writable directory, leading to DLL hijacking. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.