Search vulnerabilities

Results 1

Export CSV
CVE-2026-114594

Time-of-check time-of-use (TOCTOU) race condition in Sandisk Dashboard Installer

A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.

CVSS 4.0 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Products