CVE-2021-33093

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-20616

Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory...

CVE-2020-1312

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2020-1078

An elevation of privilege vulnerability exists in Windows Installer because of the way Windows Installer handles certain filesystem operations.To exploit the vulnerability, an attacker would require unprivileged execution on the victim system, aka 'Windows Installer Elevation of Privilege...

CVE-2019-16283

A potential security vulnerability has been identified with a version of the HP Softpaq installer that can lead to arbitrary code execution...

CVE-2019-13404

The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...

CVE-2017-20051

A vulnerability was found in InnoSetup Installer. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to uncontrolled search path. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

The vulnerability of Intel graphics processor microprogramming software installers, which allows attackers to enhance their privileges

The vulnerability of Intel graphics processor microprogramming software installers is related to incorrect definition of symbolic references before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

CVE-2025-29837 Windows Installer Information Disclosure Vulnerability

...

Windows Installer Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

PT-2025-20952 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...

PT-2025-18342 · Gstreamer +2 · Gstreamer +1

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw...

CVE-2025-27727 Windows Installer Elevation of Privilege Vulnerability

...

The vulnerability of the software installer for Zoom video conferencing applications on macOS systems allows a hacker to escalate their privileges.

The vulnerability of the software installer for Zoom video conferencing on macOS systems is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2023-45588

An external control of file name or path vulnerability CWE-73 in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process...

The vulnerability of the software installer for Zoom video conferencing allows a hacker to disclose protected information.

The vulnerability of the software installer for Zoom video conferencing relates to the improper assignment of ownership rights. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

Google Chrome OS 安全漏洞

Google ChromeOS is a Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from an elevation of privilege vulnerability that originates from elevation of privilege in the installer and recovery image handling, which can be exploited by an attacker to cause...

The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.