CVE-2018-20146

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-02-21 · updated 2026-06-17

Description

An issue was discovered in Liquidware ProfileUnity before 6.8.0 with Liquidware FlexApp before 6.8.0. A local user could obtain administrator rights, as demonstrated by use of PowerShell.

Affected products

Liquidware Flexapp: before 6.8.0 — fixed in 6.8.0
Liquidware Profileunity: before 6.8.0 — fixed in 6.8.0

How to fix

Upgrade to a fixed version: Liquidware Flexapp 6.8.0; Liquidware Profileunity 6.8.0. Check the vendor advisory for mitigations.

References

https://www.liquidware.com/content/pdf/documents/support/Liquidware-ProfileUnity-Release-Notes.pdf
https://www.liquidware.com/content/pdf/documents/support/Liquidware-ProfileUnity-Release-Notes.pdf

Get alerted when CVE-2018-20146 or the next vulnerability affects your stack