What’s Vulnerable › Vulnerabilities

CVE-2019-12177

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-06-03 · updated 2026-06-17
• Weakness: CWE-427

Description

Privilege escalation due to insecure directory permissions affecting ViveportDesktopService in HTC VIVEPORT before 1.0.0.36 allows local attackers to escalate privileges via DLL hijacking.

Affected products

• HTC Viveport: before 1.0.0.36 — fixed in 1.0.0.36

How to fix

Upgrade to a fixed version: HTC Viveport 1.0.0.36. Check the vendor advisory for mitigations.

References

• https://community.viveport.com/
• https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8
• https://posts.specterops.io/razer-synapse-3-elevation-of-privilege-6d2802bd0585
• https://community.viveport.com/
• https://huskersec.com/privilege-escalation-via-htc-viveport-desktop-c93471ff87c8
• https://posts.specterops.io/razer-synapse-3-elevation-of-privilege-6d2802bd0585

Get alerted when CVE-2019-12177 or the next vulnerability affects your stack