CVE-2024-36495: Faronics Winselect

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The application Faronics WINSelect (Standard + Enterprise) saves its configuration in an encrypted file on the file system which "Everyone" has read and write access to, path to file: C:\ProgramData\WINSelect\WINSelect.wsd The path for the affected WINSelect Enterprise configuration file is: C:\ProgramData\Faronics\StorageSpace\WS\WINSelect.wsd

Affected products

• Faronics Winselect: from 8.30.xx.903
• Faronics Winselect Standard + Enterprise

Published 2024-06-24. Last modified 2026-06-17.