7580 matches found
PT-2025-3724 · Usbxpress · Usbxpress
Name of the Vulnerable Software and Affected Versions: USBXpress Win 98SE Dev Kit affected versions not specified Description: The issue is caused by an uncontrolled search path in the USBXpress Win 98SE Dev Kit installer, leading to DLL hijacking vulnerabilities. This can result in privilege...
PNGPlug Loader Delivers ValleyRAT Malware Through Fake Software Installers
Cybersecurity researchers are calling attention to a series of cyber attacks that have targeted Chinese-speaking regions like Hong Kong, Taiwan, and Mainland China with a known malware called ValleyRAT. The attacks leverage a multi-stage loader dubbed PNGPlug to deliver the ValleyRAT payload,...
CVE-2025-0567
CVE-2025-0567 affects Epic Games Launcher (versions up to 17.2.1). The issue is in the profapi.dll library in the Installer component, causing an untrusted search path. Local attack is required, with high attack complexity and low overall impact (confidentiality/integrity/availability). The CVSS ...
Epic Games Launcher 代码问题漏洞
Epic Games Launcher is a game software launcher from Epic Games USA. A code issue vulnerability exists in Epic Games Launcher version 17.2.1 and earlier, which stems from code in the profapi.dll library in the component Installer that can lead to untrusted search paths...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02836)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Installer elevation of privilege vulnerability (CNVD-2025-02835)
Microsoft Windows Installer is a component of the Windows operating system from Microsoft USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges...
PT-2025-3754 · Zoom · Zoom Workplace App For Windows
Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps for Windows affected versions not specified Description: The issue concerns an untrusted search path in the installer for some Zoom Workplace Apps for Windows. This could allow an authorized user to conduct an escalation o...
The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of the App Package Installer installation program for Microsoft Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges...
Microsoft Windows Installer Service Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Windows...
The vulnerability of the Windows Installer component on Windows operating systems allows a perpetrator to elevate their privileges to the SYSTEM level.
The vulnerability of the Windows Installer component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the SYSTEM level...
CVE-2025-21331
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21331
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21287
Windows Installer Elevation of Privilege Vulnerability...
CVE-2025-21275
Windows App Package Installer Elevation of Privilege Vulnerability...
CVE-2025-21331
CVE-2025-21331 is a Windows Installer Elevation of Privilege vulnerability. The connected documents confirm it is a local privilege escalation (attack vector: LOCAL, requires LOW privileges and USER interaction) with high impact (C:H/I:H/A:H) per CVSS 3.1. Public details in the NCSC advisory cate...
CVE-2025-21331 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21331 Windows Installer Elevation of Privilege Vulnerability
...
CVE-2025-21287
CVE-2025-21287 is a Windows Installer elevation of privilege vulnerability. The linked documents confirm this CVE affects the Windows Installer component in Windows OS, enabling a local attacker with low privileges and no user interaction to elevate privileges. Remediation is provided by Microsof...