CVE-2020-18171: 
TechSmith Snagit vulnerability analysis and mitigation

CVE-2020-18171 is a disputed vulnerability affecting TechSmith Snagit version 19.1.0.2653. The vulnerability is related to the software's use of Object Linking and Embedding (OLE), which allegedly could allow attackers to obfuscate and embed crafted files for privilege escalation. The vulnerability was published on July 26, 2021, and has been marked as disputed, noting that Snagit's use of OLE itself is not inherently a security vulnerability (NVD, CVE).

The vulnerability has received a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H, and a CVSS v2.0 base score of 7.2 (HIGH) with the vector string (AV:L/AC:L/Au:N/C:C/I:C/A:C). The vulnerability is classified under CWE-269 (Improper Privilege Management) (NVD).

If exploited, the vulnerability could potentially lead to privilege escalation on affected systems running TechSmith Snagit 19.1.0.2653. The CVSS scores indicate high potential impact on confidentiality, integrity, and availability of the system (NVD).

The vulnerability requires local access with low attack complexity and low privileges for exploitation. No user interaction is required for the exploit to be successful, as indicated by the CVSS vector string (NVD).