漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
Uncontrolled search path elements in Anthropic Claude for Windows installer (Claude Setup.exe) versions prior to 1.1.3363 allow local privilege escalation via DLL search-order hijacking. The installer loads DLLs (e.g., profapi.dll) from its own directory after UAC elevation, enabling arbitrary code execution if a malicious DLL is planted alongside the installer.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Claude Code 安全漏洞
Vulnerability Description
Claude Code是Anthropic开源的一个终端原生AI编程工具。 Claude Code 1.1.3363之前版本存在安全漏洞,该漏洞源于不受控制的搜索路径元素,可能导致本地权限提升。
CVSS Information
N/A
Vulnerability Type
N/A