https://pwnwiki.com/index.php?action=history&feed=atom&title=Epic_Games_Easy_Anti-Cheat_4.0_%E6%9C%AC%E5%9C%B0%E6%AC%8A%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E 2026-04-11T21:24:07Z Revision history for this page on the wiki MediaWiki 1.35.1 https://pwnwiki.com/index.php?title=Epic_Games_Easy_Anti-Cheat_4.0_%E6%9C%AC%E5%9C%B0%E6%AC%8A%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E&diff=2724&oldid=prev 2021-05-08T02:02:13Z

<p>Created page with &quot;==EXP== &lt;pre&gt; # Exploit Title: Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation # Date: 04.05.2021 # Exploit Author: LiquidWorm # Vendor Homepage: https://www.epicg...&quot;</p> <p><b>New page</b></p><div>==EXP==<br /> &lt;pre&gt;<br /> # Exploit Title: Epic Games Easy Anti-Cheat 4.0 - Local Privilege Escalation<br /> # Date: 04.05.2021<br /> # Exploit Author: LiquidWorm<br /> # Vendor Homepage: https://www.epicgames.com https://www.easy.ac<br /> <br /> Epic Games Easy Anti-Cheat 4.0 Local Privilege Escalation<br /> <br /> <br /> Vendor: Epic Games, Inc.<br /> Product web page: https://www.epicgames.com<br /> https://www.easy.ac<br /> Affected version: 4.0.0.0<br /> <br /> Summary: Easy Anti-Cheat is the industry-leading anti–cheat service,<br /> countering hacking and cheating in multiplayer PC games through the<br /> use of hybrid anti–cheat mechanisms.<br /> <br /> Desc: The application suffers from an unquoted search path issue impacting<br /> the service 'EasyAntiCheat' for Windows deployed as part of Easy Anti-Cheat<br /> Service application. This could potentially allow an authorized but non-privileged<br /> local user to execute arbitrary code with elevated privileges on the system.<br /> A successful attempt would require the local user to be able to insert their<br /> code in the system root path undetected by the OS or other security applications<br /> where it could potentially be executed during application startup or reboot.<br /> If successful, the local user's code would execute with the elevated privileges<br /> of the application.<br /> <br /> Tested on: Microsoft Windows 10<br /> <br /> <br /> Vulnerability discovered by Gjoko 'LiquidWorm' Krstic<br /> @zeroscience<br /> <br /> <br /> Advisory ID: ZSL-2021-5652<br /> Advisory URL: https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5652.php<br /> <br /> <br /> 04.05.2021<br /> <br /> --<br /> <br /> <br /> C:\Users&gt;sc qc EasyAntiCheat<br /> [SC] QueryServiceConfig SUCCESS<br /> <br /> SERVICE_NAME: EasyAntiCheat<br /> TYPE : 10 WIN32_OWN_PROCESS<br /> START_TYPE : 3 DEMAND_START<br /> ERROR_CONTROL : 1 NORMAL<br /> BINARY_PATH_NAME : C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe<br /> LOAD_ORDER_GROUP :<br /> TAG : 0<br /> DISPLAY_NAME : EasyAntiCheat<br /> DEPENDENCIES :<br /> SERVICE_START_NAME : LocalSystem<br /> <br /> &lt;/pre&gt;</div>

Pwnwiki