VYPR
← All advisories
High severity8.8NVD Advisory· Published Sep 10, 2024· Updated Jun 17, 2026

CVE-2024-44107

CVE-2024-44107

Description

DLL hijacking in the management console of Ivanti Workspace Control before version 2025.2 (10.19.0.0) allows a local authenticated attacker to escalate their privileges and achieve arbitrary code execution.

Affected products

3
  • Ivanti/Workspace Control3 versions
    cpe:2.3:a:ivanti:workspace_control:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:ivanti:workspace_control:*:*:*:*:*:*:*:*range: <10.18.99.0
    • (no CPE)range: <2025.2 (10.19.0.0)
    • (no CPE)range: 10.19.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.