description: Due to a bug with management of handles in OVRServiceLauncher.exe, an attacker could expose a privileged process handle to an unprivileged process, leading to local privilege escalation. This issue affects Oculus Desktop versions after 1.39 and prior to 31.1.0.67.507.
problem types: CWE-269: Improper Privilege Management
affected:
{
product: Oculus Desktop
vendor: Facebook
versions:
lessThan: unspecified, status: unaffected, version: 31.1.0.67.507, versionType: custom
lessThan: 31.1.0.67.507, status: affected, version: unspecified, versionType: custom
lessThanOrEqual: 1.39, status: unaffected, version: unspecified, versionType: custom
}