{"id":"CVE-2023-50446","details":"An issue was discovered in Mullvad VPN Windows app before 2023.6-beta1. Insufficient permissions on a directory allow any local unprivileged user to escalate privileges to SYSTEM.","modified":"2026-08-12T03:51:24.683937461Z","published":"2023-12-10T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50446.json"},"references":[{"type":"WEB","url":"https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6"},{"type":"WEB","url":"https://github.com/mullvad/mullvadvpn-app/releases/tag/2023.6-beta1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/50xxx/CVE-2023-50446.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-50446"},{"type":"FIX","url":"https://github.com/mullvad/mullvadvpn-app/pull/5398"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mullvad/mullvadvpn-app","events":[{"introduced":"0"},{"fixed":"6b890b4f7b3c672d2515f4b308dfa84e913e004c"},{"fixed":"0a86f659f33a882f60d34a08263b1ba30d3e2d01"}],"database_specific":{"cpe":"cpe:2.3:a:mullvad:mullvad_vpn:*:*:*:*:*:windows:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2023.5"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["ios/2023.1","ios/2023.1-build5","ios/2022.3-build2","ios/2022.3","ios/2022.3-build1","ios/2022.2","ios/2022.1","ios/2021.4","ios/2021.3","ios/2021.2","ios/2021.1","ios/2020.5","ios/2020.4","2020.5-beta2","ios/2020.3","2020.5-beta1","ios/2020.2","2020.4-beta2","ios/2020.1","2020.4-beta1","2019.10-beta2","2019.10-beta1","2019.9","2019.9-beta1","2019.8","2019.8-beta1","2019.7","2019.7-beta1","2019.2-beta1","2018.6-beta1","2018.4-beta2","2018.4-beta1","2018.3","2018.3-beta1","2018.2-beta3","2018.2-beta2","2018.2-beta1","2018.1-beta9","2018.1-beta8","2017.1-beta4","2017.1-beta3","2017.1-beta2","2017.1-beta1","2017.1-alpha5","2017.1-alpha4"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-50446.json"}}],"schema_version":"1.9.0"}