Microsoft Windows Installer Service Link Following Information Disclosure Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...

CVE-2025-29837 Windows Installer Information Disclosure Vulnerability

...

Windows Installer Information Disclosure Vulnerability

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to disclose information locally...

PT-2025-20952 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to improper link resolution before file access, also known as 'link following', in Windows Installer. This allows an authorized attacker to disclose informati...

PT-2025-18342 · Gstreamer +2 · Gstreamer +1

Name of the Vulnerable Software and Affected Versions: GStreamer affected versions not specified Description: This issue allows local attackers to escalate privileges on affected installations. An attacker must first obtain the ability to execute low-privileged code on the target system. The flaw...

CVE-2025-27727 Windows Installer Elevation of Privilege Vulnerability

...

The vulnerability of the software installer for Zoom video conferencing applications on macOS systems allows a hacker to escalate their privileges.

The vulnerability of the software installer for Zoom video conferencing on macOS systems is related to the use of an unreliable search path. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2023-45588

An external control of file name or path vulnerability CWE-73 in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process...

The vulnerability of the software installer for Zoom video conferencing allows a hacker to disclose protected information.

The vulnerability of the software installer for Zoom video conferencing relates to the improper assignment of ownership rights. Exploiting this vulnerability can allow a perpetrator to disclose protected information...

Google Chrome OS 安全漏洞

Google ChromeOS is a Web-based lightweight open source operating system from Google Google. Google ChromeOS suffers from an elevation of privilege vulnerability that originates from elevation of privilege in the installer and recovery image handling, which can be exploited by an attacker to cause...

The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

Windows Installer Elevation of Privilege Vulnerability

...

CVE-2024-0833

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...

CVE-2025-0146

Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access...

The vulnerability of the IBM Robotic Process Automation software installer allows a perpetrator to enhance their privileges.

The vulnerability of the IBM Robotic Process Automation software installer is related to errors in inherited permissions. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-9499 Uncontrolled search path can lead to DLL hijacking in USBXpress Win 98SE Dev Kit installer

DLL hijacking vulnerabilities, caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer can lead to privilege escalation and arbitrary code execution when running the impacted installer...

Silicon Configuration Wizard 2 installer 代码问题漏洞

Silicon Configuration Wizard 2 installer is a Configuration Wizard 2 installer from Silicon Corporation. A security vulnerability exists in the Silicon Configuration Wizard 2 installer that stems from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

Silicon IDE installer 代码问题漏洞

Silicon IDE installer is a development program installer from Silicon Corporation. A security vulnerability exists in Silicon IDE installer that originates from an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges and execute arbitrary code...

PT-2025-3718 · Toolstick · Toolstick

Name of the Vulnerable Software and Affected Versions: ToolStick affected versions not specified Description: The issue is caused by an uncontrolled search path in the ToolStick installer, leading to DLL hijacking vulnerabilities. This can result in privilege escalation and arbitrary code executi...