CVE-2019-11644

CVE-2019-11644 describes a local privilege escalation vulnerability in various F-Secure installer versions for Windows products, including F-Secure SAFE, Internet Security, Anti-Virus, Client Security, PSB Workstation Security, and Computer Protection. The vulnerability, rated High severity (CVSS 7.8), allows a local user to escalate privileges through a DLL hijacking attack. An attacker can place a malicious DLL in the C:\Windows\Temp directory, which the installer's rm.exe process will then load and execute with elevated privileges when an administrator runs the installer. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.