CVE-2020-3979

CVE-2020-3979 describes a local privilege escalation vulnerability affecting InstallBuilder for Qt Windows installers prior to version 20.7.0. The installers predictably load plugins from a non-admin writable location, allowing an attacker to plant a malicious library for code execution with the installer's privileges. Rated 7.8 HIGH on CVSS, this vulnerability has a low attack complexity and requires user interaction, potentially leading to high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.