CVE-2023-6235 (published 2023-11-21T12:24:55.918Z)
An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary libusk.dll file in the C:\Users\user\AppData\Local\Microsoft\WindowsApps\ directory, which could lead to the execution and persistence of arbitrary code.
Affected products: Vendor: Duet Display
Product: Duet Display for Windows 10+
Versions: 2.5.9.1