CVE record · 1 source
CVE-2026-112357
CVSS 7.8GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation…
- Vendor
- GFI USA, LLC
- Product
- GFI KerioConnect
- CVSS v3.1
- 7.8 AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness
- CWE-276
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation…
GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory…