In the Amazon AWS WorkSpaces client before 3.1.9 on... · CVE-2021-38112 · GitHub Advisory Database · GitHub

In the Amazon AWS WorkSpaces client before 3.1.9 on...

High severity Unreviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

In the Amazon AWS WorkSpaces client before 3.1.9 on Windows, argument injection in the workspaces:// URI handler can lead to remote code execution because of the Chromium Embedded Framework (CEF) --gpu-launcher argument.

References

Published by the National Vulnerability Database

Sep 22, 2021

Published to the GitHub Advisory Database May 24, 2022

Last updated Jan 30, 2023