Zoom Rooms Security Breach

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Client versions prior to 5.17.5, which stems from a race condition in the...

PT-2024-20492 · Zoom · Zoom Rooms Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows versions prior to 5.17.5 Description: A race condition in the installer may allow an authenticated user to conduct a denial of service via local access. Recommendations: For versions prior to 5.17.5, update to...

PT-2024-20493 · Zoom · Zoom Rooms Client For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows versions prior to 5.17.5 Description: The issue is related to improper access control in the installer, which may allow an authenticated user to conduct a denial of service via local access. Recommendations: For...

Zoom Rooms Security Breach

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems. A security vulnerability exists in Zoom Rooms Client versions prior to 5.17.5 that stems from improper access control in t...

CVE-2024-21436

Windows Installer Elevation of Privilege Vulnerability...

Privilege escalation

Windows Installer Elevation of Privilege Vulnerability...

CVE-2024-21436 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2024-21436 Windows Installer Elevation of Privilege Vulnerability

...

CVE-2024-21436

CVE-2024-21436 is a Windows Installer elevation of privilege vulnerability. The CVE entry reports a CVSS v3.1 base score of 7.8 (high) with local attack vector, low attack complexity, requiring low privileges and no user interaction; impact is high on confidentiality, integrity, and availability....

Windows Installer Elevation of Privilege Vulnerability

...

PT-2024-2122 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system installer, allowing an attacker to elevate their privileges. This can affect the system,...

Microsoft Windows Installer Security Vulnerability

Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. A security vulnerability exists in Microsoft Windows Installer. An attacker could exploit the vulnerability to elevate privileges. The...

CVE-2024-0044

In createSessionInternal of PackageInstallerService.java, there is a possible run-as any app due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-27303

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh...

CVE-2024-27303 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh...

CVE-2024-27303 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh...

CVE-2024-27303 electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)

electron-builder is a solution to package and build a ready for distribution Electron, Proton Native app for macOS, Windows and Linux. A vulnerability that only affects eletron-builder prior to 24.13.2 in Windows, the NSIS installer makes a system call to open cmd.exe via NSExec in the .nsh...

CVE-2024-27303

The CVE-2024-27303 vulnerability affects electron-builder’s NSIS installer prior to 24.13.2 on Windows. The NSIS installer runs NSExec, which by default searches the install folder before PATH. If an attacker places a malicious cmd.exe in the same folder as the installer, that executable can be e...

BIT-ROUNDCUBE-2020-18670

Cross Site Scripting XSS vulneraibility in Roundcube mail .4.4 via database host and user in /installer/test.php...

BIT-RABBITMQ-2021-22117

RabbitMQ installers on Windows prior to version 3.8.16 do not harden plugin directory permissions, potentially allowing attackers with sufficient local filesystem permissions to add arbitrary plugins...