CVE-2023-50446

    Dashboard / Vulnerabilities / CVE-2023-50446

    CVE-2023-50446

    Published: 10 Dec 2023Last Modified: 28 Oct 2026

    Summary:

    Details: An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM.

    References: https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6, https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6-beta1, https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50446.json, https://nvd.nist.gov/vuln/detail/CVE-2023-50446, https://github.com/mullvad/mullvadvpn-app/pull/5398

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -6b890b4f7b3c672d2515f4b308dfa84e913e004c

    Affected versions

    ios/2023.1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2023-50446 | CVE-DB