CVE-2019-16860

CVE-2019-16860 describes an Untrusted Search Path vulnerability in Code42 app for Windows versions up to 7.0.2. A local, non-administrative attacker could exploit this by creating or modifying a DLL, which the Code42 service might then load and execute with elevated privileges. This vulnerability carries a CVSS score of 7.3 (HIGH), indicating a high potential for impact on confidentiality, integrity, and availability, with low attack complexity and user interaction required. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.