The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to cause a denial-of-service, grant themselves elevated privileges, execute arbitrary code with the victim's privileges and potentially gain access to sensitive data. The most serious vulnerability h...

The vulnerability of Google Chrome and Microsoft Edge browser installers allows attackers to enhance their privileges.

The vulnerability of Google Chrome and Microsoft Edge browsers stems from insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges by sending specially crafted files...

CVE-2024-38305

Dell SupportAssist for Home PCs Installer exe version 4.0.3 contains a privilege escalation vulnerability in the installer. A local low-privileged authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary executables on the operating system with...

PT-2024-6288 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge versions prior to 128.0.6613.84 Description: The issue is related to insufficient data validation in the installer, which can be exploited by a local attacker to perform privilege...

CVE-2024-42439

Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...

PT-2024-7024 · Microsoft +1 · Windows +2

Name of the Vulnerable Software and Affected Versions: Intel Ethernet Adapter Complete Driver Pack versions affected versions not specified IntelR Ethernet Connection I219-LM affected versions not specified Description: The issue is related to an uncontrolled search path element in the installer...

Zoom Workplace Security Vulnerability

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper input validation in the desktop application installer could allow an authenticated user to perform a denial of service via local access...

Zoom Meeting SDK and Zoom Workplace Security Vulnerabilities

Zoom Meeting SDK and Zoom Workplace are both products of Zoom, Inc.Zoom Meeting SDK is a development kit. Enables your company to accelerate the development and build fully customizable video-based applications by leveraging the performance, scale and reliability of Zoom's industry-leading...

PT-2024-24831

Name of the Vulnerable Software and Affected Versions Software House C●CURE 9000 affected versions not specified Description The issue arises when the Software House C●CURE 9000 installer uses weak credentials under certain circumstances. Recommendations At the moment, there is no information abo...

PT-2024-24315 · Samsung · Samsung Portable Ssd For T5

Name of the Vulnerable Software and Affected Versions: Samsung Portable SSD for T5 version 1.6.10 Description: An issue was discovered in the installer of Samsung Portable SSD for T5 on Windows, allowing an attacker to tamper with the directory and DLL files used during the installation process...

CVE-2024-27247

Improper privilege management in the installer for Zoom Desktop Client for macOS before version 5.17.10 may allow a privileged user to conduct an escalation of privilege via local access...

PT-2024-5022 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik Qlikview versions prior to May 2022 SR3 12.70.20300 and prior to May 2023 SR2 12.80.20200 Description: A race condition in the installer executable may allow an existing lower privileged user to cause code to be executed in the context o...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Improper access control

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-0833

In Telerik Test Studio versions prior to v2023.3.1330, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik Test Studio install is present, a lower privileged user has the ability to manipulate the installatio...

The vulnerability of the installer of the Intel NUC Pro Software Suite, related to an uncontrolled search path element, allows a hacker to trigger a service failure.

The vulnerability of the installer of the Intel NUC Pro Software Suite related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a perpetrator to cause a service failure...

CVE-2023-48670

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...

CVE-2023-48670

Dell SupportAssist for Home PCs version 3.14.1 and prior versions contain a privilege escalation vulnerability in the installer. A local low privileged authenticated attacker may potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with...

PT-2023-30890 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs versions 3.14.1 and prior Description: A privilege escalation vulnerability exists in the installer of Dell SupportAssist for Home PCs, allowing a local low-privileged authenticated attacker to potentially...