Installation Packages Security Vulnerabilities and Issues — Installation Packages CVE List

cve

CVE-2019-6196

A symbolic link vulnerability in some Lenovo installation packages, prior to version 1.2.9.3, could allow privileged file operations during file extraction and...

7.3CVSS

6.5AI Score

0.0004EPSS

2020-06-09 08:15 PM

55

cve

CVE-2019-6173

A DLL search path vulnerability could allow privilege escalation in some Lenovo installation packages, prior to version 1.2.9.3, during installation if an attacker already has administrative...

6.5CVSS

6.8AI Score

0.0004EPSS

2020-06-09 08:15 PM

60

cve

CVE-2020-0779

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0798, CVE-2020-0814, CVE-2020-0842,...

5.5CVSS

6.3AI Score

0.001EPSS

2020-03-12 04:15 PM

49

cve

CVE-2020-0683

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS

7.6AI Score

0.0004EPSS

2020-02-11 10:15 PM

956

In Wild

5

cve

CVE-2020-0686

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from...

7.8CVSS

7.6AI Score

0.0004EPSS

2020-02-11 10:15 PM

60

In Wild