What’s Vulnerable › Vulnerabilities

CVE-2023-29486

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-12-21 · updated 2026-06-17
• Weakness: CWE-1333

Description

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities.

Affected products

• Heimdalsecurity Thor: before 3.7.0; through 2.6.9 — fixed in 3.7.0

How to fix

Upgrade to a fixed version: Heimdalsecurity Thor 3.7.0. Check the vendor advisory for mitigations.

References

• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93
• https://medium.com/%40drabek.a/weaknesses-in-heimdal-thors-line-of-products-9d0e5095fb93

Get alerted when CVE-2023-29486 or the next vulnerability affects your stack