Security Advisory
CVE-2024-40720
8.8
HIGH
Vulnerability Description
The specific API in TCBServiSign Windows Version from CHANGING Information Technology does not properly validate server-side input. When a user visits a spoofed website, unauthenticated remote attackers can modify the `HKEY_CURRENT_USER` registry to execute arbitrary commands.
Published Date
August 2, 2024
Official Source
NIST NVD Advisory