CVE-2021-24038

CVE-2021-24038 is a local privilege escalation vulnerability affecting Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507. An attacker could exploit a bug in OVRServiceLauncher.exe's handle management to expose a privileged process handle to an unprivileged process. With a CVSS score of 7.8 (High), this flaw allows for high impact to confidentiality, integrity, and availability with low attack complexity and no user interaction required. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion.