Support Product Security

SanDisk PrivateAccess Desktop App Version 6.4.11

WDC Tracking Number: WDC-24002
Product Line: SanDisk PrivateAccess
Published: June 17, 2024

Last Updated: June 11, 2024

Description

SanDisk PrivateAccess 6.4.11 for Windows includes updates to help improve the security of your device.

To take advantage of the latest security fixes, Western Digital recommends that Windows users promptly update their devices to the latest software. As with any upgrade, it is best to back up your data before installing the upgrade. All PrivateAccess Windows users will receive a notification to update the app.

For support and download information, please refer to our Support Knowledge Base article.

For more information on the latest security updates, see the release notes

Product Impact
Minimum Fix Version
Last Updated
SanDisk PrivateAccess Desktop App for Windows
6.4.11
June 11, 2024
SanDisk PrivateAccess Desktop App for Mac
NOT AFFECTED
N/A

Advisory Summary

This release mitigates a potential DLL hijacking vulnerability in the SanDisk PrivateAccess application for Windows that could lead to arbitrary code execution in the context of the system user. Windows users should upgrade to PrivateAccess version 6.4.11 using the notification in the app.

CVE Number: CVE-2024-22167

Reported By: Western Digital would like to thank Alexander Huaman Jaimes for reporting this issue.