Medium severity6.7NVD Advisory· Published Aug 3, 2018· Updated Jun 17, 2026

CVE-2018-12989

Description

The report-viewing feature in Pearson VUE Certiport Console 8 and IQSystem 7 before 2018-06-26 mishandles child processes and consequently launches Internet Explorer or Microsoft Edge as Administrator, which allows local users to gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Pearsonvue/Console 8
cpe:2.3:a:pearsonvue:console_8:*:*:*:*:*:*:*:*
Range: <2018-06-26
Pearsonvue/Iqsystem 7
cpe:2.3:a:pearsonvue:iqsystem_7:*:*:*:*:*:*:*:*
Range: <2018-06-26
Pearson VUE/Certiport Consolellm-fuzzy
Range: <=8
Pearson VUE/IQSystemllm-fuzzy
Range: <=7

Patches

Vulnerability mechanics

References

certiport.pearsonvue.com/Support/Console-system-updatesnvdVendor Advisory
computeco.de/2018-07-29_1.htmlnvdMitigationThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000