CVE-2024-47045

Published: Sep 26, 2024Modified: Jun 17, 2026Deferred

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege.

Related CWEs

CWE-268

Privilege Chaining

Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination.

References (2)

https://jvn.jp/en/jp/JVN57749899/

Source: vultures@jpcert.or.jp

https://www.e-tax.nta.go.jp/topics/2024/topics_20240924_versionup.htm

Source: vultures@jpcert.or.jp

Timeline

No history available yet.