CVE-2022-4991

Description

Tychon includes an OpenSSL component that specifies an OPENSSLDIR variable as a subdirectory that may be controllable by an unprivileged user on Windows. Tychon contains a privileged service that uses this OpenSSL component. A user who can place a specially-crafted openssl.cnf file at an appropriate path may be able to achieve arbitrary code execution with SYSTEM privileges.

PUBLISHED Reserved 2026-06-01 | Published 2026-06-01 | Updated 2026-06-02 | Assigner certcc

Problem types

CWE-284

Product status

References

www.kb.cert.org/vuls/id/730007

cve.org (CVE-2022-4991)

nvd.nist.gov (CVE-2022-4991)

Download JSON