CVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation.
Published Oct 13, 2026 · updated Oct 13, 2026
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
Timeline
Detection, updates, and resolution for this record.
Oct 13, 2026 · Catalog
Detected
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
Sources
- CVE.orgCVE-2026-110359
Official CVE identifier
cve.org - NIST NVDCVE-2026-110359
Hyland Desktop Host for Windows before 25.1.1 is vulnerable to local privilege escalation. This is caused by a privileged service running from the %PROGRAMDATA%\Hyland\DesktopHost\bin folder with weak permissions. A local user can exploit this to escalate privileges.
nvd.nist.gov