CVE-2026-20799
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
Untrusted search path in Battery Life Diagnostic Tool software before version 2.9.0 may allow an escalation of privilege. An attacker with an authenticated user and a high complexity attack may enable privilege escalation. The attack requires local access, passive user interaction, and may impact confidentiality, integrity, and availability.
Risk Assessment
Privilege escalation could allow an attacker to gain full control over the system, potentially leading to a breach of data and resources.
Recommendation
It is recommended to update Battery Life Diagnostic Tool to version 2.9.0 or later, which includes a fix for the search path issue.
Original NVD description (English source)
Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present with special internal knowledge and requires passive user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.