CVE-2018-10190

CVE-2018-10190 describes a privilege escalation vulnerability in London Trust Media Private Internet Access (PIA) VPN Client v77 for Windows. Due to insufficient access controls, an unauthenticated local attacker can leverage the VPN client's "Changelog" or "Help" options, which spawn an elevated web browser instance, to execute arbitrary files with elevated privileges. This allows for high impact to confidentiality, integrity, and availability, reflected in its CVSSv3 score of 7.8 (HIGH). Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.