The vulnerability is an uncontrolled search path in the version.dll library of the UltraVNC Service component. Up to version 1.6.4.0, an attacker who can run local code can manipulate the DLL search order, potentially causing the system to load an arbitrary DLL and execute malicious code. This can lead to privilege escalation or arbitrary code execution on the affected host.

Affected systems are installations of UltraVNC Service running any version up to and including 1.6.4.0. The vulnerability resides in the version.dll component used by the Service. All systems with these versions of UltraVNC are potentially impacted; users running newer releases that contain a fix are not affected.

With a CVSS base score of 7.3 the vulnerability is considered serious. Although the EPSS score is not available, the fact that the exploit is public and labeled as high complexity suggests that it is not trivial to exploit, but determined attackers with local access could succeed. The lack of a KEV listing indicates it has not been observed in the wild as a widely leveraged exploit, yet the potential for local privilege escalation remains significant, warranting prompt remediation.