Vulnerability · Published Apr 8, 2020 · Assigned by facebook
CVE-2020-1885
High 7.8
In plain English
A high-severity security flaw in Oculus Desktop from Facebook. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 36% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 63.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oculus Desktop | 1.44.0.328549 |
References
- https://www.facebook.com/security/advisories/cve-2020-1885 x_refsource_CONFIRM