CVE-2022-26337

Trend Micro Password Manager Consumer installer version 5.0.0.1262 and below is vulnerable to an Uncontrolled Search Path Element vulnerability that could allow an attacker to use a specially crafted file to exploit the vulnerability and escalate local privileges on the affected machine...

CVE-2022-26488

Removed by vendor...

Trend Micro Password Manager 代码问题漏洞

Trend Micro Password Manager Installer is a password manager installer from Trend Micro, Inc. An elevation of privilege vulnerability exists in Trend Micro Password Manager Installer, which can be exploited by attackers to elevate privileges on the affected machine using specially crafted files...

Incorrect signature verification on gzip-compressed install images

The coreos-installer is a program to fetch a disk image and stream it to a target disk. During the installation process the installation image gpg signatures are verified. The signature verification can be bypassed for gzip-compressed images due to a flaw in gzip coreos-installer wrapper. When th...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Cleanup Manager in Windows operating systems relates to the improper handling of references before accessing files. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Google Chrome web app installer allows a hacker to manipulate the URL input by using a specially created HTML page.

The vulnerability of the Google Chrome WebApp installer is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows a malicious actor to manipulate the URL input using a specially created HTML page...

The vulnerability of the software installer for Cisco ThousandEyes Recorder allows a hacker to disclose protected information.

The vulnerability of the software installer for Cisco ThousandEyes Recorder relates to insufficient protection of registration data. Exploiting this vulnerability could allow a hacker to disclose protected information...

CVE-2021-43017

Adobe Creative Cloud version 5.5 and earlier are affected by an Application denial of service vulnerability in the Creative Cloud Desktop installer. An authenticated attacker with root privileges could leverage this vulnerability to achieve denial of service by planting a malicious file on the...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems, which allows attackers to perform spoofing attacks

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

Improper access control

Improper access control in the installer for some IntelR Wireless BluetoothR and KillerTM BluetoothR products in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33087

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2021-33095

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in the installer for some IntelR IrisR Xe MAX Dedicated Graphics Drivers for Windows 10 before version 27.20.100.9466 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33094

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-6408

Name of the Vulnerable Software and Affected Versions Microsoft App Installer versions prior to 1.21.3421.0 Description The issue is related to a spoofing vulnerability in the AppX installer that affects Microsoft Windows. This vulnerability can be exploited by attackers using specially crafted...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. Intel Wireless Bluetooth has a security vulnerability that stems from a potential security flaw in the installer of some Intel Wireless Bluetooth and Killer...

PT-2021-4794

Name of the Vulnerable Software and Affected Versions Microsoft Windows Installer versions prior to the fixed version Description The vulnerability is related to an elevation-of-privilege issue in the Windows Installer component, allowing attackers to gain administrative privileges. This issue...

CVE-2021-22037

Under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system command. The full path to the command is not enforced, which results in a search in the search path until a binary can be identified. This makes the installer/uninstaller vulnerable to Path...

InstallBuilder代码问题漏洞

Vmware InstallBuilder is a multi-platform installer development and automatic update tool from Vmware. InstallBuilder suffers from a security vulnerability that stems from the fact that under certain circumstances, when manipulating the Windows registry, InstallBuilder uses the reg.exe system...