High severity7.8NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026
CVE-2023-46814
CVE-2023-46814
Description
A binary hijacking vulnerability exists within the VideoLAN VLC media player before 3.0.19 on Windows. The uninstaller attempts to execute code with elevated privileges out of a standard user writable location. Standard users may use this to gain arbitrary code execution as SYSTEM.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:videolan:vlc_media_player:*:*:*:*:*:*:*:*range: <3.0.19
- (no CPE)
- (no CPE)range: <3.0.19
Patches
Vulnerability mechanics
References
1- www.videolan.org/security/sb-vlc3019.htmlnvdVendor Advisory
News mentions
1- ABB Ability Camera ConnectCISA ICS Advisories