CVE-2019-5443

CVE-2019-5443 describes a vulnerability in curl versions up to 7.65.1, affecting products from haxx, Microsoft, NetApp, and Oracle. A non-privileged user can place malicious code and a configuration file in a specific directory (C:/usr/local/), which curl will then automatically execute as an OpenSSL engine upon invocation. This local privilege escalation vulnerability carries a high CVSS score of 7.8, indicating that if a privileged user subsequently invokes the compromised curl, the malicious code can achieve full system compromise. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.