CVE-2023-41099

In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.from a regular user to SYSTEM...

Atos CardOS API 安全漏洞

Atos Eviden CardOS is a smart card specialized for the Internet of Things from Atos France. A security vulnerability exists in the Atos CardOS API prior to version 5.5.5.2811, which originates in the Windows installer, where a local privilege escalation may occur...

PT-2024-12920 · Atos · Atos Eviden Cardos Api

Name of the Vulnerable Software and Affected Versions: Atos Eviden CardOS API versions prior to 5.5.5.2811 Description: The issue allows for Local Privilege Escalation, enabling an attacker to escalate privileges from a regular user to SYSTEM. This occurs in the Windows installer component of the...

PT-2024-5022 · Qlik · Qlikview

Name of the Vulnerable Software and Affected Versions: Qlik Qlikview versions prior to May 2022 SR3 12.70.20300 and prior to May 2023 SR2 12.80.20200 Description: A race condition in the installer executable may allow an existing lower privileged user to cause code to be executed in the context o...

SUSE CVE-2024-27303

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh...

CVE-2024-29154

danielmiessler fabric through 1.3.0 allows installer/client/gui/static/js/index.js XSS because of innerHTML mishandling, such as in htmlToPlainText...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2024-27301

Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability inside the postinstall installer script to make the installer execute arbitrary code as root. The cause of the vulnerability is the fact that the shebang !/bin/zsh is being used...

CVE-2024-27301 Privilege Escalation Abusing installer in SupportApp

Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability inside the postinstall installer script to make the installer execute arbitrary code as root. The cause of the vulnerability is the fact that the shebang !/bin/zsh is being used...

CVE-2024-27301 Privilege Escalation Abusing installer in SupportApp

Support App is an opensource application specialized in managing Apple devices. It's possible to abuse a vulnerability inside the postinstall installer script to make the installer execute arbitrary code as root. The cause of the vulnerability is the fact that the shebang !/bin/zsh is being used...

CVE-2023-32633

Improper input validation in the IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-32633

CVE-2023-32633 concerns Intel® Converged Security Management Engine (CSME) installer: improper input validation before version 2328.5.5.0 may allow an authenticated user to escalate privileges via local access. The issue is documented with affected component as the CSME installer and is tied to l...

CVE-2023-28389

Incorrect default permissions in some IntelR CSME installer software before version 2328.5.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28389

CVE-2023-28389 is an Intel CSME-related issue described in multiple sources. Affected software: Intel® Converged Security Management Engine (CSME) installer software prior to version 2328.5.5.0. Root cause: incorrect default permissions in the installer could allow an authenticated user to escala...

Support App Security Vulnerability

Support App is an open source application designed to manage Apple devices. A security vulnerability exists in Support App prior to version 2.5.1 Rev 2, which originates from a security flaw in the installer script that allows the installer to execute arbitrary code as root...

CVE-2024-24692

Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-24693

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

Race condition

Race condition in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

Improper access control

Improper access control in the installer for Zoom Rooms Client for Windows before version 5.17.5 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-24692

The CVE-2024-24692 entry concerns Zoom Rooms Client for Windows, where a race condition in the installer before version 5.17.5 may allow an authenticated local attacker to cause a denial of service. The issue is tied to the Windows installer process, with impact limited to availability (DOs) and ...