CVE-2025-50173

CVE-2025-50173 is a Windows Installer local privilege-escalation vulnerability caused by weak authentication that enables an authenticated, local attacker to elevate privileges. The CVE is documented with a CVSS v3.1 base score of 7.8 (Impact: High; Privileges Required: Low; Scope: Unchanged; Loc...

CVE-2025-50173 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-20087

CVE-2025-20087 is an Intel advisory issue describing improper default permissions on some Intel® oneAPI DPC++/C++ Compiler installers that could let an authenticated local user escalate privileges. Affected: Intel oneAPI DPC++/C++ Compiler installers (and related tooling) with the vulnerability d...

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...

Description of the security update for PowerPoint 2016: August 12, 2025 (KB5002765)

None None...

Windows Installer Elevation of Privilege Vulnerability

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

End of support for Office 2016 and Office 2019

None None...

PT-2025-32796

Name of the Vulnerable Software and Affected Versions Windows Installer versions affected versions not specified Description A weak authentication issue in Windows Installer allows an authorized attacker to elevate privileges locally. The vulnerability is related to an authentication bypass. A...

PT-2025-32701 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler affected versions not specified Description: Incorrect default permissions in some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially escalate privileges via...

KLA86584 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of vulnerabilitie...

Zoom Workplace < 6.4.10 Vulnerability (ZSB-25029)

The version of Zoom Workplace installed on the remote host is prior to 6.4.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom USA. A security vulnerability exists in Zoom Clients for Windows that originates from a competing condition in the installer that could affect application integrity...

PT-2025-32947

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A race condition exists in the installer for certain Zoom Clients for Windows. This may allow a local, unauthenticated user to compromise application integrity...

Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Siemens Web Installer

SUMMARY The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

BIT-LIBPYTHON-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

Linux Distros Unpatched Vulnerability : CVE-2025-23279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit o...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...