CVE-2023-3181

CVE-2023-3181 is a high-severity privilege escalation vulnerability affecting Splashtop Streamer on Microsoft Windows. A standard user can exploit a flaw in the Splashtop Software Updater’s uninstallation process, which creates a temporary folder with inherited permissions and copies an executable (Au_.exe) that launches as SYSTEM. By placing a malicious DLL in this temporary folder, an attacker can achieve arbitrary code execution with SYSTEM privileges. While the CVSS score is 7.8 (HIGH), there is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.