CVE-2024-31498 Information

Description

ykman-gui (aka YubiKey Manager GUI) before 1.2.6 on Windows when Edge is not used allows privilege escalation because browser windows can open as Administrator.

Reference

https://www.yubico.com/support/security-advisories/ysa-2024-01/