Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

Docker Desktop 参数注入漏洞

Docker Desktop is a container technology-based desktop software for lightweight deployment of applications from the U.S. company Docker. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

CVE-2023-27529

Wacom Tablet Driver installer prior to 6.4.2-1 for macOS contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege...

Wacom Tablet Driver 后置链接漏洞

Wacom Tablet Driver installer is an installation driver from Wacom Japan Wacom. A security vulnerability exists in Wacom Tablet Driver versions prior to 6.4.2-1, which stems from a contained file access vulnerability that could be exploited by an attacker to execute arbitrary code with root...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to errors in the memory object handling mechanisms. Exploiting this vulnerability can allow an attacker to increase their privileges...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. Windows Server 2008 for x64-based Systems Service Pack 2,Windows Server...

CVE-2023-25143

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One Server that stems from an uncontrolled search path element vulnerability in the installer, which can be exploited by an attacker to achieve remote code execution on th...

CVE-2023-25143

An uncontrolled search path element vulnerability in the Trend Micro Apex One Server installer could allow an attacker to achieve a remote code execution state on affected products...

K84084843: NGINX Controller installer vulnerability CVE-2020-5911

Security Advisory Description The NGINX Controller installer starts the download of Kubernetes packages from an HTTP URL On Debian/Ubuntu system. CVE-2020-5911 Impact A man-in-the-middle MITM attacker can use this vulnerability to intercept the insecure HTTP channel and convincingly forge...

CVE-2022-42291

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this...

CVE-2022-42291

NVIDIA GeForce Experience contains a vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked location, which may lead to data tampering. An attacker does not have explicit control over the exploitation of this...

NVIDIA GeForce Experience 后置链接漏洞

NVIDIA GeForce Experience is a set of automatic update tools for graphics cards from NVIDIA Corporation in the United States. The product is capable of automatically updating graphics card drivers and supports graphics card performance management and optimization, among other things. ecto is an...

PT-2023-1554 · Nvidia · Nvidia Geforce Experience

Name of the Vulnerable Software and Affected Versions: NVIDIA GeForce Experience affected versions not specified Description: The issue is related to the installer of the NVIDIA GeForce Experience software, where a user may inadvertently delete data from a linked location, potentially leading to...

The vulnerability of the Windows Installer component on Windows operating systems, which allows a hacker to increase their privileges

The vulnerability of the Windows Installer component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS, allowing a intruder to escalate their privileges.

The vulnerability of the client installer for conducting real-time audio and video conferences in Zoom Client for Meetings for macOS stems from a state of resource copying competition during the process. Exploiting this vulnerability can allow an intruder to enhance their privileges...

CVE-2022-31694

InstallBuilder Qt installers built with versions previous to 22.10 try to load DLLs from the installer binary parent directory when displaying popups. This may allow an attacker to plant a malicious DLL in the installer parent directory to allow executing code with the privileges of the installer...

PT-2022-5832 · Zoom · Zoom Rooms Installer For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Installer for Windows versions prior to 5.12.6 Description: The issue is related to a local privilege escalation. A local low-privileged user could exploit this during the install process to escalate their privileges to the SYSTEM...

CVE-2022-36384

Unquoted search path in the installer software for some Intelr NUC Kit Wireless Adapter drivers for Windows 10 before version 22.40 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-23352 · Intel +1 · Intel Nuc Kit Wireless Adapter Drivers +1

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue concerns path traversal in the installer software, potentially allowing an authenticated user to enable escalation of privilege via local...