CVE-2026-4134

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix, that during installation could allow a local authenticated user to execute code with elevated privileges...

Adobe Photoshop Installer 安全漏洞

Adobe Photoshop Installer is a installation program for the image editing software Adobe Photoshop. The Adobe Photoshop Installer has a security vulnerability, which stems from uncontrolled search path elements, potentially allowing arbitrary code to be executed in the current user environment...

CVE-2026-34632: Uncontrolled Search Path Element

Adobe Photoshop Installer was affected by an Uncontrolled Search Path Element vulnerability that could have resulted in arbitrary code execution in the context of the current user. A low-privileged local attacker could have exploited this vulnerability by manipulating the search path used by the...

FUEL CMS 安全漏洞

FUEL CMS is a content management system CMS developed by David McReynolds using the Codelgniter framework. Version 1.5.2 of FUEL CMS has a security vulnerability that stems from authenticated remote code execution. This vulnerability could allow arbitrary code to be executed through the...

CVE-2026-30461

Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the /controllers/Installer.php and the function addgitsubmodule...

CVE-2026-30461

Daylight Studio FuelCMS v1.5.2 contains an authenticated remote code execution (RCE) vulnerability. The issue resides in the add_git_submodule function within the /controllers/Installer.php file, where a lack of enforced access control allows authenticated users to clone arbitrary repositories. I...

Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Samsung MagicINFO 9 Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the produ...

EUVD-2026-22449

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-27910

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

CVE-2026-27910 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-27910 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2026-27910

CVE-2026-27910 concerns Windows Installer privilege elevation. The vulnerability is described as an improper handling of insufficient permissions in Windows Installer that allows an authorized attacker to elevate privileges locally. The CVSS v3.1 base score is 7.8 (HIGH), with Local attack vector...

Windows Installer Elevation of Privilege Vulnerability

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

Description of the security update for PowerPoint 2016: April 14, 2026 (KB5002808)

None None...

CVE-2026-27910: Improper Handling of Insufficient Permissions or Privileges

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2026-32772

🪟 CVE-2026-27910 reminds us: Windows Installer metadata is basically a neon sign for attackers. Great—patch time, again. Enterprise risk never really “goes away,” does it? https://t.co/VVCvsxvJkF ElevationOfPrivilege PrivilegeEscalation WindowsInstaller MsrcSecurityUpdates https://t.co/vnE4IWgHgA...

Microsoft Windows Installer 安全漏洞

The Microsoft Windows Installer is a component of Microsoft’s Windows operating system. It provides a standard foundation for installing and uninstalling software. The Microsoft Windows Installer has security vulnerabilities. Attackers can exploit these vulnerabilities to gain elevated privileges...

JanelaRAT: a financial threat targeting users in Latin America

Background JanelaRAT is a malware family that takes its name from the Portuguese word "janela" which means "window". JanelaRAT looks for financial and cryptocurrency data from specific banks and financial institutions in the Latin America region. JanelaRAT is a modified variant of BX RAT that has...

MAL-2026-2563 Malicious code in robase-installer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1edd96cface7dcae9f445d94982ffc19a27e557fae7030e77e6e5646dfdd5c98 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...

Malicious code in api-analysis (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c3bf88cef3ca699f69bada95749b40c4426c9a9c528e53c473698be88cbdc783 During installation package downloads and runs a malicious executable. Likely continuation of 2026-03-rowrap. The campaign is built over a malicious Roblox API...