Writing to an unprivileged file from a privileged OVRRedir.exe process in Oculus Desktop before 1.44.0.32849 on Windows allows local users to write to arbitrary files and consequently gain privileges via vectors involving a hard link to a log file.
[
{
"product": "Oculus Desktop",
"vendor": "Facebook",
"versions": [
{
"status": "affected",
"version": "1.44.0.328549"
}
]
}
]