CVE-2021-40854

CVE-2021-40854 is a local privilege escalation vulnerability affecting AnyDesk versions prior to 6.2.6 and 6.3.3. A local attacker can exploit this by leveraging the "Open Chat Log" feature to launch a privileged Notepad process, which can then be used to execute other applications with administrator privileges. Rated 7.8 HIGH, this vulnerability has a low attack complexity and no user interaction, allowing for complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.