CVE-2020-1402

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'...

PT-2020-3193

Name of the Vulnerable Software and Affected Versions Windows ActiveX Installer Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to the improper handling of memory by the Windows ActiveX Installer Service. To explo...

CVE-2020-1402: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows ActiveX Installer Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows ActiveX Installer Service Elevation of Privilege Vulnerability'...

The vulnerability of the Windows Modules Installer Service in Microsoft Windows operating systems allows a hacker to exploit their privileges.

The vulnerability of the Windows Modules Installer Service in operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Multiple Vulnerabilities (KB4561643)

This host is missing a critical security update according to Microsoft KB4561643 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-1254

An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Modules Installer Service Elevation of Privilege Vulnerability'...

CVE-2020-1254

CVE-2020-1254 concerns an elevation of privilege in Windows Modules Installer Service. The vulnerability arises because the service improperly handles class object members, enabling a locally authenticated attacker to execute arbitrary code with system privileges. Affected: Windows Modules Instal...

PT-2020-2909

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to the incorrect handling of file system operations by the Windows Installer service in Microsoft Windows operating systems. This can allow an attacker to eleva...

PT-2020-2948

Name of the Vulnerable Software and Affected Versions Windows Modules Installer Service affected versions not specified Description The issue is related to the improper handling of class object members in memory by the Windows Modules Installer Service, which can allow an attacker to elevate thei...

PT-2020-3521

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to an elevation-of-privilege problem, potentially stemming from incorrect handling of file system operations by the Windows Installer service in Microsoft Windo...

CVE-2020-1254: Undefined Security Weakness

An elevation of privilege vulnerability exists when Windows Modules Installer Service improperly handles class object members.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Modules Installer Service Elevation of Privilege Vulnerability'...

KLA11806 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to obtain sensitive information, execute arbitrary code, gain privileges, cause denial of service, bypass security restrictions. Below is a complete list of...

The vulnerability of the Extension Installer Service, a component of the Microsoft Visual Studio software development tool, allows a malicious individual to escalate their privileges.

The vulnerability of the Extension Installer Service in the Microsoft Visual Studio software development environment is related to improper handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

Design/Logic Flaw

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...

CVE-2020-5896

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...

CVE-2020-5896

CVE-2020-5896 affects BIG-IP Edge Client for Windows. The Windows Installer Service’s temporary folder in versions 7.1.5–7.1.9 has weak file/folder permissions, enabling potential privilege escalation. Advisory details indicate that signed executables and MSI files could be executed from the temp...

PT-2020-18796

Name of the Vulnerable Software and Affected Versions F5 BIG-IP Edge Client versions 7.1.5 through 7.1.9 Description The issue concerns weak file and folder permissions in the temporary folder of the Windows Installer Service of the BIG-IP Edge Client. Recommendations For versions 7.1.5 through...

CVE-2020-5896: Incorrect Default Permissions

On versions 7.1.5-7.1.9, the BIG-IP Edge Client's Windows Installer Service's temporary folder has weak file and folder permissions...

CVE-2020-0900

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...

CVE-2020-0900

An elevation of privilege vulnerability exists when the Visual Studio Extension Installer Service improperly handles file operations, aka 'Visual Studio Extension Installer Service Elevation of Privilege Vulnerability'...