CVE-2020-12828

CVE-2020-12828 is a critical vulnerability affecting AnchorFree VPN SDK versions prior to 1.3.3.218. It allows an attacker to achieve SYSTEM-level privilege escalation by exploiting a flaw in how the VPN SDK service handles executable locations over a localhost-bound socket. With a CVSS score of 9.8 (Critical), this vulnerability presents a severe risk, as it can be exploited remotely with low complexity to gain full control over affected systems. While no active exploitation, public exploit code, or significant community discussion has been observed, the high FAUCET Risk Score of 91/100 indicates its potential for severe impact if exploited.