7583 matches found
chromium -- multiple security fixes
Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...
GO-2023-1652 cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared
cloudflared's Installer has Local Privilege Escalation Vulnerability in github.com/cloudflare/cloudflared...
CVE-2024-35214 Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT...
CVE-2024-35214 Vulnerability in CylanceOPTICS Windows Installer Package Impacts CylanceOPTICS for Windows
A tampering vulnerability in the CylanceOPTICS Windows Installer Package of CylanceOPTICS for Windows version 3.2 and 3.3 could allow an attacker to potentially uninstall CylanceOPTICS from a system thereby leaving it with only the protection of CylancePROTECT...
CVE-2024-35214
CVE-2024-35214 affects BlackBerry CylanceOPTICS for Windows, specifically the Windows Installer Package in versions 3.2 and 3.3. The issue is a tampering vulnerability in the installer that could allow an attacker with local access to uninstall CylanceOPTICS, potentially leaving the system with o...
BlackBerry CylanceOPTICS 安全漏洞
BlackBerry CylanceOPTICS is a cloud-enabled Endpoint Detection and Response EDR solution from BlackBerry Canada. A security vulnerability exists in BlackBerry CylanceOPTICS versions 3.2 and 3.3, which stems from a tampering vulnerability in the installer package that allows an attacker to uninsta...
PT-2024-27934 · Dell · Dell Supportassist
Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs Installer exe version 4.0.3 Description: A local low-privileged authenticated attacker could potentially exploit a privilege escalation vulnerability in the installer, leading to the execution of arbitrary...
PT-2024-26381 · Cylance · Cylanceoptics
Name of the Vulnerable Software and Affected Versions: CylanceOPTICS for Windows versions 3.2 and 3.3 Description: A tampering vulnerability in the CylanceOPTICS Windows Installer Package could allow an attacker to potentially uninstall CylanceOPTICS from a system, thereby leaving it with only th...
Cybercriminals Exploit Popular Software Searches to Spread FakeBat Malware
Cybersecurity researchers have uncovered a surge in malware infections stemming from malvertising campaigns distributing a loader called FakeBat. "These attacks are opportunistic in nature, targeting users seeking popular business software," the Mandiant Managed Defense team said in a technical...
CVE-2024-43378 calamares-nixos-extensions LUKS keyfile exposure regression on legacy BIOS systems
calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users who installed NixOS through the graphical installer who used manual disk partitioning to create a setup where the system was booted via legacy BIOS rather than UEFI; some disk partitio...
CVE-2024-42439
Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42440
Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42439
Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42441
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42440
Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42441 Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Incorrect Privilege Assignment
Incorrect privilege assignment in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42440 Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS, Zoom Rooms Client for macOS - Improper Privilege Management
Improper privilege management in the installer for Zoom Workplace Desktop App for macOS, Zoom Meeting SDK for macOS and Zoom Rooms Client for macOS before 6.1.5 may allow a privileged user to conduct an escalation of privilege via local access...
CVE-2024-42440
CVE-2024-42440 affects Zoom on macOS: Zoom Workplace Desktop App, Zoom Meeting SDK, and Zoom Rooms Client prior to version 6.1.5 suffer from improper privilege management in the installer, enabling privilege escalation via local access. Public details from multiple sources confirm the affected co...
CVE-2024-42439 Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS - Untrusted Search Path
Untrusted search path in the installer for Zoom Workplace Desktop App for macOS and Zoom Meeting SDK for macOS before 6.1.0 may allow a privileged user to conduct an escalation of privilege via local access...