p PatchFirst

CVE-2026-110359

CVE-2026-110359

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.

CVSS 7.8 · High · EPSS 0.1% · Fix available

Published
Updated

Affected products and versions

  • desktop host

    Versions
    • ≥ 0, < 25.1.1: Affected (semver)

    Update to 25.1.1

Original sources

Check your server →