CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

CVE-2024-32942 affects Intel® DSA (Driver & Support Assistant) installer for Windows. The vulnerability arises from incorrect default permissions (misconfiguration of default privileges) in Intel DSA installers prior to version 24.2.19.5, which may allow an authenticated user to escalate privileg...

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21373

Windows Installer Elevation of Privilege Vulnerability...

CVE-2025-21206

Visual Studio Installer Elevation of Privilege Vulnerability...

CVE-2025-21206

Visual Studio Installer Elevation of Privilege Vulnerability...

Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

GHSA-QRM9-F75W-HG4C Ash Authentication has flawed token revocation checking logic in actions generated by `mix ash_authentication.install`

Impact Applications which have been bootstrapped by the new igniter installer since AshAuthentication v4.1.0 and who have used the magic link strategy, password resets, confirmation, or are manually revoking tokens are affected by revoked tokens being allowed to verify as valid. If you did not us...

CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-21373 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2025-21373

Technical details for CVE-2025-21373 are not provided in the supplied documents. Monitor for updates from Microsoft and the KB/MSRC references for affected product, impact and fixes.

CVE-2025-21206

The CVE-2025-21206 issue concerns the Visual Studio installers with an elevation-of-privilege vulnerability. A concrete root cause mentioned in connected PT-2025-6298 is an uncontrolled search path element affecting the Visual Studio Installer, which could allow a local attacker to gain higher pr...

Windows Installer Elevation of Privilege Vulnerability

...

Visual Studio Installer Elevation of Privilege Vulnerability

...

Description of the security update for Excel 2016: February 11, 2025 (KB5002687)

None None...

PT-2025-6642 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 24.2.19.5 Description: The issue is related to incorrect default permissions for some IntelR DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2025-6317 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: An elevation-of-privilege issue in Windows Installer allows attackers to affect the system. The estimated number of potentially affected devices worldwide is not specified. There ...