Blizzard Battle.net Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Blizzard Battle.net version 2.40.0.15267. This issue arises from insecure file permissions that allow low-privileged local attackers to place a crafted shell script or executable in the C:\ProgramData directory. The attacker can then wait for a high-privileged user to execute it, leading to unauthorized privilege escalation.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation, enabling a low-privileged user to gain higher-level permissions.