SanDisk PrivateAccess Desktop App Version 6.4.11
WDC Tracking Number: WDC-24002
Product Line: SanDisk PrivateAccess
Published: June 17, 2024
Last Updated: June 11, 2024
Description
SanDisk PrivateAccess 6.4.11 for Windows includes updates to help improve the security of your device.
To take advantage of the latest security fixes, Western Digital recommends that Windows users promptly update their devices to the latest software. As with any upgrade, it is best to back up your data before installing the upgrade. All PrivateAccess Windows users will receive a notification to update the app.
For support and download information, please refer to our Support Knowledge Base article.
For more information on the latest security updates, see the release notes
Advisory Summary
This release mitigates a potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. Windows users should upgrade to PrivateAccess version 6.4.11 using the notification in the app.
CVE Number: CVE-2024-22167
Reported By: Western Digital would like to thank Alexander Huaman Jaimes for reporting this issue.