CVE-2018-6623

CVE-2018-6623 is a high-severity vulnerability affecting Hola VPN version 1.79.859, allowing an unprivileged user to achieve privilege escalation. This is due to insecure access rights (SERVICE_ALL_ACCESS) granted to the hola_svc and hola_updater services, enabling an attacker to modify or replace the service executable with arbitrary code. Upon the next service restart, this malicious code would execute, potentially with elevated privileges depending on the service's user context. While the CVSS score is 8.8 (High), there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.