Privilege escalation

An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

CVE-2020-1532 Windows InstallService Elevation of Privilege Vulnerability

...

CVE-2020-1532

CVE-2020-1532 is a Windows elevation-of-privilege vulnerability in the InstallService caused by improper memory handling. The flaw allows a locally authenticated attacker who already has execution on the victim to run a crafted application to elevate privileges. Microsoft’s security update fixes ...

Microsoft Windows InstallService Elevation of Privilege Vulnerability

Windows InstallService is a service for the windows operating system from Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in Microsoft Windows InstallService, which stems from Windows InstallService failing to properly handle memory, and can be exploited...

Windows InstallService Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows InstallService improperly handles memory. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges. The...

PT-2020-3909 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows InstallService improperly handles memory. To exploit this, an attacker would first need to gain...

Microsoft Windows InstallService Hard Link Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Microsoft Stor...