Description of the security update for PowerPoint 2016: August 12, 2025 (KB5002765)

None None...

End of support for Office 2016 and Office 2019

None None...

Windows Installer Elevation of Privilege Vulnerability

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

Zoom Workplace VDI < 6.3.12 Vulnerability (ZSB-25029)

The version of Zoom Workplace VDI installed on the remote host is prior to 6.3.12. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

CVE-2025-50173: Weak Authentication

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...

PT-2025-32701 · Intel · Intel Oneapi Dpc++/C++ Compiler

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI DPC++/C++ Compiler affected versions not specified Description: Incorrect default permissions in some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially escalate privileges via...

PT-2025-32947

Name of the Vulnerable Software and Affected Versions: Zoom Clients for Windows affected versions not specified Description: A race condition exists in the installer for certain Zoom Clients for Windows. This may allow a local, unauthenticated user to compromise application integrity...

KLA86584 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, spoof user interface, cause denial of service. Below is a complete list of vulnerabilitie...

PT-2025-32796

Name of the Vulnerable Software and Affected Versions Windows Installer versions prior to September 2025 Description A weak authentication issue in Windows Installer can allow an authorized attacker to elevate privileges locally. This issue was addressed with a security enhancement in the August...

CVE-2025-49456: Untrusted Search Path

Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application integrity via local access...

Zoom Workplace < 6.4.10 Vulnerability (ZSB-25029)

The version of Zoom Workplace installed on the remote host is prior to 6.4.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-25029 advisory. - Race condition in the installer for certain Zoom Clients for Windows may allow an unauthenticated user to impact application...

Microsoft Windows Installer 安全漏洞

Microsoft Windows Installer is a component of the Windows operating system from Microsoft Corporation USA. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom USA. A security vulnerability exists in Zoom Clients for Windows that originates from a competing condition in the installer that could affect application integrity...

Siemens Web Installer

SUMMARY The installers used to install several Siemens products are affected by a DLL hijacking vulnerability. This could allow an attacker to execute arbitrary code when a legitimate user installs an application that uses the affected installer component. This vulnerability poses a risk only...

BIT-LIBPYTHON-2022-26488

In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable directories to the system search path. To exploit, an administrator must have installed Python for all users and enabl...

Linux Distros Unpatched Vulnerability : CVE-2025-23279

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NVIDIA .run Installer for Linux and Solaris contains a vulnerability where an attacker could use a race condition to escalate privileges. A successful exploit o...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...

CVE-2025-54368 uv is vulnerable to ZIP payload obfuscation through parsing differentials

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-54368

uv is a Python package and project manager written in Rust. In versions 0.8.5 and earlier, remote ZIP archives were handled in a streamwise fashion, and file entries were not reconciled against the archive's central directory. An attacker could contrive a ZIP archive that would extract with...

CVE-2025-26513

The installer for SAN Host Utilities for Windows versions prior to 8.0 is susceptible to a vulnerability which when successfully exploited could allow a local user to escalate their privileges...