CVE-2021-33436

CVE-2021-33436 describes a local privilege escalation vulnerability in NoMachine for Windows versions prior to 6.15.1 and 7.5.2. This flaw allows a local, non-privileged user to perform DLL hijacking by placing a malicious DLL in a writable directory within the system path, ultimately leading to arbitrary code execution with NT AUTHORITY\SYSTEM privileges. The vulnerability carries a CVSS score of 7.3 (High) due to its low attack complexity and the potential for complete compromise of confidentiality, integrity, and availability, though user interaction is required. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.