CVE-2020-7310

Privilege Escalation vulnerability in the installer in McAfee McAfee Total Protection MTP trial prior to 4.0.161.1 allows local users to change files that are part of write protection rules via manipulating symbolic links to redirect a McAfee file operations to an unintended file...

Intel Server Board M10JNP2SB Code Issue Vulnerability

Intel Server Board is a server motherboard from Intel Corporation USA. A code issue vulnerability exists in the installer of the RSTe Software RAID Driver for Intel Server Board M10JNP2SB versions prior to 4.7.0.1119. A local attacker could exploit the vulnerability to elevate privileges...

Code injection

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

The vulnerability of the installation file of the Kaspersky Security Center allows a perpetrator to increase their privileges.

The vulnerability of the installation file of the Kaspersky Security Center antivirus software is related to errors in the mechanism for checking the path to dynamically linked libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...

Naver Whale Browser Installer Data Forgery Issue Vulnerability

Naver Whale Browser is a web browser with a user-defined interface from Naver, Korea.Installer is the installer. A data forgery vulnerability exists in Naver Whale Browser Installer versions prior to 1.2.0.5, which originates from a Flash installer that does not support signature checking. An...

Intel Data Migration Software Elevation of Privilege Vulnerability

Intel Data Migration Software is a set of data migration software from Intel USA. The software supports data migration between two storage drives. A security vulnerability exists in the installer of Intel Data Migration Software 3.3 and earlier versions, which stems from incorrect default...

CVE-2020-0598

Uncontrolled search path in the installer for the IntelR Binary Configuration Tool for Windows, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-7260

DLL Side Loading vulnerability in the installer for McAfee Application and Change Control MACC prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Language Pack Installer component on Windows operating systems allows a malicious individual to execute processes under privileged access.

The vulnerability of the Windows Language Pack Installer component in Windows operating systems is related to file operation errors. Exploiting this vulnerability can allow an attacker to execute processes in privileged mode using a specially created application...

CVE-2020-0515

Uncontrolled search path element in the installer for IntelR Graphics Drivers before versions 26.20.100.7584, 15.45.30.5103, 15.40.44.5107, 15.36.38.5117, and 15.33.49.5100 may allow an authenticated user to potentially enable escalation of privilege via local access...

Kingsoft Typewriter suffers from dll hijacking vulnerability

Kingsoft Typewriter is a typing software. A dll hijacking vulnerability exists in the Kingsoft Typewriter installer. An attacker can exploit this vulnerability to load a malicious dll and execute malicious code...

Racer Live Companion installer suffers from dll hijacking vulnerability

Racer Live Companion is a live broadcasting aid based on Racer Open. There is a dll hijacking vulnerability in the installer of Racer Live Companion. Attackers can use the vulnerability to load malicious dll and execute malicious code...

Kingsoft Wordmaster has a dll hijacking vulnerability

Kingsoft Wordsmith is a translation and foreign language learning software developed by Zhuhai Kingsoft Office Software Co. A dll hijacking vulnerability exists in the Kingsoft wordmaster installer. An attacker can exploit the vulnerability to load a malicious dll and execute malicious code...

Western Digital WesternDigitalSSDDashboardSetup.exe Code Issue Vulnerability

Western Digital WesternDigitalSSDDashboardSetup.exe is an installer for SSD performance monitoring dashboard software from Western Digital. A code issue vulnerability exists in Western Digital WesternDigitalSSDDashboardSetup.exe versions prior to 3.0.2.0. An attacker could exploit this...

CVE-2020-9418

An untrusted search path vulnerability in the installer of PDFescape Desktop version 4.0.22 and earlier allows an attacker to gain privileges and execute code via DLL hijacking...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in handling symbolic links within MSI packages. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-8601

Trend Micro Vulnerability Protection 2.0 is affected by a vulnerability that could allow an attack to use the product installer to load other DLL files located in the same directory...

Code Execution Vulnerability in QQ Pinyin Input Method Installer

QQ Pinyin Input Method is a Chinese pinyin input method software. A code execution vulnerability exists in the QQ Pinyin Input Method installer. It can be exploited by an attacker to execute arbitrary code...

Code Execution Vulnerability in QQGame Installer QQGameMini

QQGame is a casual game platform independently developed by Tencent QQ Games. A code execution vulnerability exists in the QQGame installation package, QQGameMini. An attacker can exploit the vulnerability to execute arbitrary code...