Everything Privilege Escalation and Denial-of-Service Vulnerability

A vulnerability exists in the Everything application, specifically in versions prior to 1.5a, due to the service running as SYSTEM and communicating with the lower-privileged GUI via a named pipe. This named pipe has a NULL DACL, granting full permissions to all users. As a result, a local low-privilege user could potentially exploit this vulnerability for privilege escalation (if combined with other factors) or to cause a denial-of-service.

Impact

Exploitation could lead to a denial-of-service or allow a local low-privilege user to escalate privileges, but only if this vulnerability is chained with other elements.