What’s Vulnerable › Vulnerabilities

CVE-2021-41066

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-14 · updated 2026-06-17
• Weakness: CWE-862

Description

An issue was discovered in Listary through 6. When Listary is configured as admin, Listary will not ask for permissions again if a user tries to access files on the system from Listary itself (it will bypass UAC protection; there is no privilege validation of the current user that runs via Listary).

Affected products

• Bopsoft Listary: through 6

References

• https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e
• https://www.listary.com/download
• https://medium.com/%40tomerp_77017/exploiting-listary-searching-your-way-to-system-privileges-8175af676c3e
• https://www.listary.com/download

Get alerted when CVE-2021-41066 or the next vulnerability affects your stack