{"id":"CVE-2026-114594","published":"2026-11-09T17:17:10.583","lastModified":"2026-11-09T17:17:10.583","description":"A time-of-check to time-of-use (TOCTOU) race condition in the Sandisk Dashboard installer allows a local, authenticated standard user to replace an installer-staged binary in a user-writable temporary directory between validation and execution. The elevated installer then executes the attacker-controlled binary, resulting in local privilege escalation to a high-integrity (administrative) context. This issue affects Sandisk Dashboard through 5.2.2.3.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-367","CWE-379"],"vendors":[],"products":[],"references":[{"url":"https://www.sandisk.com/support/product-security/sdc-26001-sandisk-dashboard-app-version-5-3-2-4","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}